Safari could not establish a secure connection to Wikipedia?

Question

Level 4

1,083 points

Safari could not establish a secure connection to Wikipedia?

I am trying to connect to Wikipedia.org using Safari version 10.0 (12602.1.50.0.10), on 10.12 (sierra) but get an error stating that "Safari Can't Open then Page", because "safari can't open a secure connection to the server". There is no padlock or anything else to try to get more information on the issue.

Trying in Google Chrome, "54.0.2840.59 beta (64-bit)", I am told that "Your connection is not private" and "NET::ERR_CERT_REVOKED". Clicking on the red warning symbol I get an indication that the "certificate issuer is invalid", with the certificate issuer being "GlobalSign Organization Validation CA - SHA256 - G2".

A friend on the the same local network running a Mac, with 10.11 (El Capitan), reports no such issues. I also see no reports on the internet, suggesting the problem is probably local to my computer.

Can anyone suggest a way to solve this issue?

Edit: seems like someone else is seeing issues with that certificate authority too, as reported on 'Stack Exchange'.

MacBook Air (13-inch Mid 2013), OS X El Capitan (10.11.6), null

Posted on Oct 13, 2016 7:48 AM

Reply

Answer 1

Top-ranking reply

Donald Livoni

Level 1

14 points

Oct 13, 2016 4:28 PM in response to Andre John Mas

wikipedia works but i'm suddenly having this problem with vimeo and soundcloud not loading. both worked fine using current safari and chrome yesterday. also embedded vimeo videos no longer play on my website. firefox seems to be OK.

update: pasting the terminal code from above fixed this issue for soundcloud and vimeo with safari and chrome.

sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp WHERE hex(serialNum) IN ("040000000001444EF03E20", "040000000001444EF04247");'

Reply

Answer 2

Csound1

Level 9

60,057 points

Oct 13, 2016 8:02 AM in response to Andre John Mas

Works for me, no errors.

Reply

Answer 3

Andre John Mas Author

Level 4

1,083 points

Oct 13, 2016 8:13 AM in response to dialabrain

I am indeed. I wouldn't get this issue with a plain 'http' connection and wikipedia redirects to their https port anyhow.

Further I am seeing this may be a Verisign issue, with has indicated on Twitter:

We are currently experiencing issues with our OCSP which is causing certificate warning messages. We aim to fix this as soon as possible.

This won't effect everyone, since it will depend the CDN node.

BTW time on my computer is correct.

Steps according to Verisign on the the Mac side "If you’d like to delete both OCSP and CRL cache, in a terminal, enter the following command", though it may depend on the CDN updates as well:

sudo rm /var/db/crls/*cache.db

Reply

Answer 4

pablitt

Level 1

8 points

Oct 13, 2016 8:47 AM in response to Andre John Mas

I'm having the same problem, so far I cannot access https://wikipedia.org or https://drupal.org

Also, ZenMate is not able to connect to any servers because of the same issue.

I've tried changing the GlobalSign certs from default to not trusted to always trust in Keychain access but no luck.

I've also ran

sudo rm /var/db/crls/*cache.db

with no luck at all.

Using Mac OS Sierra latest Public Beta

Reply

Answer 5

scheeko

Level 1

60 points

Oct 13, 2016 9:22 AM in response to Andre John Mas

Same here, on mac OS 10.12 (not beta). Works on Firefox, but not on Safari or Chrome, with the same NET::ERR_CERT_REVOKED error:

Subject: *.wikipedia.orgIssuer: GlobalSign Organization Validation CA - SHA256 - G2Expires on: 10 Dec 2016Current date: 13 Oct 2016

Reply

Answer 6

JimmyCMPIT

Level 7

29,282 points

Oct 13, 2016 9:21 AM in response to SPCooper

FWIW all the images linked to Wikipedia are not working for me, not from any link on their site.

Reply

Answer 7

Oct 13, 2016 9:47 AM in response to Andre John Mas

I have the same issue on udemy.com out of the blue, on Sierra with both Safari and Chrome and on iMac and macBookPro. It must be linked to an ssl certificate issue on the server side but in keychain nothing shows as expired. I think GlobalSign certificates have a pb with MacOs credentials. I only get this on udemy whilst wikipedia works however...

Reply

Answer 8

Andre John Mas Author

Level 4

1,083 points

Oct 13, 2016 9:57 AM in response to BobTheFisherman

I am not using a beta OS. Using the latest version of Sierra as made available in the app store: 10.12 (16A323).

Edit: hadn't seen the response was to another poster, but leaving this just to confirm for my case.

Reply

Answer 9

dialabrain

Level 10

132,587 points

Oct 13, 2016 9:59 AM in response to BobTheFisherman

BobTheFisherman wrote:

dialabrain wrote:

FWIW it is not a beta issue.

How do you know that? I was responding to pablitt who also has issues with other sites, and he says he is using a beta version of Sierra.

Since you asked, because I have Macs with both release versions and beta versions.

Reply

Answer 10

pablitt

Level 1

8 points

Oct 13, 2016 10:00 AM in response to BobTheFisherman

It actually looks like it's a GlobalSign issue, and apparently they've fixed it and now we need to wait :/

https://twitter.com/globalsign/status/786505261842247680

The Firefox workaround works for me, at least I can access the sites again until everything is fixed 🙂

Reply

Answer 11

Oct 13, 2016 11:07 AM in response to checktrack

To Revoke the faulty GlobalSign Certs open the application Terminal and paste this:

  sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp WHERE hex(serialNum) IN ("040000000001444EF03E20", "040000000001444EF04247");'

Now all sites will work again.

Reply

Answer 12

Oct 22, 2016 10:22 PM in response to Andre John Mas

In most cases, this error occurs because incorrect date and time.

Make sure you have checked and verify your current date & time.

Besides, try these solutions, which may help to fix your problem.

https://usefulpcguide.com/16666/your-connection-is-not-private/

Reply

Answer 13

BEEEMO

Level 1

4 points

Nov 10, 2016 9:29 AM in response to ciciroes

Hi I had the same issue with soundcloud.

What helped for me is following.

Go to the website that does not work. Use rightclick->inspect element. Now go to network. There should see all sources the browser tries to load, some of them are red if the website isnt working. Click on them and say 'copy cURL'. Copy that address to ur searchbar and delete everything in front of http and after .css/.html etc. and load it.

There should appear a message that u are trying to use an unsecure certificate. Choose always trust and continue. Do this for all urls appearing red when u try to load the website and u are good to go.

It seems like there is some kind of certificate issues with the latest macOS/safari versions

Reply