Andre John Mas

Level 4 (1,026 points)

Mac OS X

Q: Safari could not establish a secure connection to Wikipedia?

I am trying to connect to Wikipedia.org using Safari version 10.0 (12602.1.50.0.10), on 10.12 (sierra) but get an error stating that "Safari Can't Open then Page", because "safari can't open a secure connection to the server". There is no padlock or anything else to try to get more information on the issue.

Trying in Google Chrome, "54.0.2840.59 beta (64-bit)", I am told that "Your connection is not private" and "NET::ERR_CERT_REVOKED". Clicking on the red warning symbol I get an indication that the "certificate issuer is invalid", with the certificate issuer being "GlobalSign Organization Validation CA - SHA256 - G2".

A friend on the the same local network running a Mac, with 10.11 (El Capitan), reports no such issues. I also see no reports on the internet, suggesting the problem is probably local to my computer.

Can anyone suggest a way to solve this issue?

Edit: seems like someone else is seeing issues with that certificate authority too, as reported on 'Stack Exchange'.

MacBook Air (13-inch Mid 2013), OS X El Capitan (10.11.6), null

Posted on Oct 13, 2016 8:00 AM

I have this question too

Solved

Level 1 (14 points)

Mac OS X

A:

wikipedia works but i'm suddenly having this problem with vimeo and soundcloud not loading. both worked fine using current safari and chrome yesterday. also embedded vimeo videos no longer play on my website. firefox seems to be OK.

update: pasting the terminal code from above fixed this issue for soundcloud and vimeo with safari and chrome.

sqlite3 ~/Library/Keychains/*/ocspcache.sqlite3 'DELETE FROM ocsp WHERE hex(serialNum) IN ("040000000001444EF03E20", "040000000001444EF04247");'

Posted on Oct 13, 2016 4:28 PM

Q: Safari could not establish a secure connection to Wikipedia?

All replies

Helpful answers

Page 1

by dialabrain,

dialabrain Oct 13, 2016 8:00 AM in response to Andre John Mas
Level 5 (6,880 points)

Mac App Store

Oct 13, 2016 8:00 AM in response to Andre John Mas

Are you using https://www.wikipedia.org/
Reply options

Link to this post

by Csound1,

Csound1 Oct 13, 2016 8:02 AM in response to Andre John Mas
Level 9 (51,447 points)

Desktops

Oct 13, 2016 8:02 AM in response to Andre John Mas

Works for me, no errors.
Reply options

Link to this post

by JimmyCMPIT,

JimmyCMPIT Oct 13, 2016 8:05 AM in response to Andre John Mas
Level 6 (8,514 points)

Mac OS X

Oct 13, 2016 8:05 AM in response to Andre John Mas

check your clock.
Whats the date and time on your computer?
Reply options

Link to this post

by Andre John Mas,

Andre John Mas Oct 13, 2016 8:13 AM in response to dialabrain
Level 4 (1,026 points)

Mac OS X

Oct 13, 2016 8:13 AM in response to dialabrain
I am indeed. I wouldn't get this issue with a plain 'http' connection and wikipedia redirects to their https port anyhow.

Further I am seeing this may be a Verisign issue, with has indicated on Twitter:
We are currently experiencing issues with our OCSP which is causing certificate warning messages. We aim to fix this as soon as possible.
This won't effect everyone, since it will depend the CDN node.

BTW time on my computer is correct.

Steps according to Verisign on the the Mac side "If you’d like to delete both OCSP and CRL cache, in a terminal, enter the following command", though it may depend on the CDN updates as well:

sudo rm /var/db/crls/*cache.db
Reply options

Link to this post

by pablitt,

pablitt Oct 13, 2016 8:47 AM in response to Andre John Mas
Level 1 (4 points)

Mac OS X

Oct 13, 2016 8:47 AM in response to Andre John Mas

I'm having the same problem, so far I cannot access https://wikipedia.org or https://drupal.org
Also, ZenMate is not able to connect to any servers because of the same issue.

I've tried changing the GlobalSign certs from default to not trusted to always trust in Keychain access but no luck.

I've also ran
sudo rm /var/db/crls/*cache.db
with no luck at all.

Using Mac OS Sierra latest Public Beta
Reply options

Link to this post

by dialabrain,

dialabrain Oct 13, 2016 8:55 AM in response to Andre John Mas
Level 5 (6,880 points)

Mac App Store

Oct 13, 2016 8:55 AM in response to Andre John Mas

What's interesting is when you first posted Wikipedia was working fine in Safari for me. Now it's not. Still works in Firefox.
Reply options

Link to this post

by BobTheFisherman,

BobTheFisherman Oct 13, 2016 8:55 AM in response to pablitt
Level 6 (15,741 points)

Oct 13, 2016 8:55 AM in response to pablitt

Maybe it is because you are using a beta OS. We can not discuss beta os issues here.
Reply options

Link to this post

by dialabrain,

dialabrain Oct 13, 2016 9:12 AM in response to pablitt
Level 5 (6,880 points)

Mac App Store

Oct 13, 2016 9:12 AM in response to pablitt

FWIW it is not a beta issue.
Reply options

Link to this post

by SPCooper,

SPCooper Oct 13, 2016 9:17 AM in response to BobTheFisherman
Level 1 (8 points)

iPad

Oct 13, 2016 9:17 AM in response to BobTheFisherman

Not a Beta OS issue. I am running OSX 10.12, and have the same issue with Safari and Chrome. HTTPS sites are not loading. Typically chrome gives me the Net::err_cert_revoked message.
Reply options

Link to this post

by scheeko,

scheeko Oct 13, 2016 9:22 AM in response to Andre John Mas
Level 1 (42 points)

Mac OS X

Oct 13, 2016 9:22 AM in response to Andre John Mas

Same here, on mac OS 10.12 (not beta). Works on Firefox, but not on Safari or Chrome, with the same NET::ERR_CERT_REVOKED error:
Subject: *.wikipedia.org
Issuer: GlobalSign Organization Validation CA - SHA256 - G2
Expires on: 10 Dec 2016
Current date: 13 Oct 2016
Reply options

Link to this post

by JimmyCMPIT,

JimmyCMPIT Oct 13, 2016 9:21 AM in response to SPCooper
Level 6 (8,514 points)

Mac OS X

Oct 13, 2016 9:21 AM in response to SPCooper

FWIW all the images linked to Wikipedia are not working for me, not from any link on their site.
Reply options

Link to this post

by SPCooper,

SPCooper Oct 13, 2016 9:22 AM in response to Andre John Mas
Level 1 (8 points)

iPad

Oct 13, 2016 9:22 AM in response to Andre John Mas

I can force the connection by manually going into the certs in the keychain and changing the settings to 'always trust' I do not like doing this because of the security risks.
Reply options

Link to this post

by dialabrain,

dialabrain Oct 13, 2016 9:25 AM in response to SPCooper
Level 5 (6,880 points)

Mac App Store

Oct 13, 2016 9:25 AM in response to SPCooper

I agree.
Reply options

Link to this post

by claude robert,

claude robert Oct 13, 2016 9:47 AM in response to Andre John Mas
Level 1 (8 points)

Mac OS X

Oct 13, 2016 9:47 AM in response to Andre John Mas

I have the same issue on udemy.com out of the blue, on Sierra with both Safari and Chrome and on iMac and macBookPro. It must be linked to an ssl certificate issue on the server side but in keychain nothing shows as expired. I think GlobalSign certificates have a pb with MacOs credentials. I only get this on udemy whilst wikipedia works however...
Reply options

Link to this post

Page 1