Wikipedia Not Loading: Chrome Security Issue

[bob012345]

In the last week Wikipedia no longer loads on Chrome. I get a security issue. I believe it is because there is an issue involving security certificates that the Chrome browser cannot get anymore from the Wikipedia site. Anyone else seeing this? I have been told Firefox only works now. Any comments. (Unfortunately, I cannot load Firefox on my Mac laptop right now).

 

[fresh_42]

I have no problems at all with Chrome. I assume that your browser settings or extensions have changed.

 

[bob012345]

I have no problems at all with Chrome. I assume that your browser settings or extensions have changed.

I did not change anything before it stopped working (that I know of) others have reported this too.

 

[fresh_42]

I did not change anything before it stopped working (that I know of) others have reported this too.

The other option would be an Apple update that might have taken place.

 

[bob012345]

The other option would be an Apple update that might have taken place.

Well, Wikipedia stopped loading on my Ipad too and I have not updated my Ipad system or my laptop.

 

[fresh_42]

If it works on FF and does not on Chrome, then it has to be searched for in the browser settings, or the combination browser - OS. I have sometimes problems loading pages if the response time goes down (for various reasons). I would also check the space demand of your chrome instance. It can get quite high and causing trouble because it is not enough left.

 

[Doc Al]

I have no problems at all with Chrome.

Same here. No problems.

 

[bob012345]

This is the message I get and it's happening on more and more sites I try to go to now.

Your connection is not private Attackers might be trying to steal your information from personal.nat
Simply trying to log into a site and it is continually blocking me with this ...
Your connection is not private
Attackers might be trying to steal your information from personal.natwest.com (for example, passwords, messages or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID

Ok, fine, but I do not believe it yet it will not let me ignore it and go there anyway!

 

[Doc Al]

our connection is not private Attackers might be trying to steal your information

A quick Google on that message led me to this: https://kinsta.com/blog/your-connection-is-not-private/

Maybe there's an idea in there that could help.

 

[bob012345]

A quick Google on that message led me to this: https://kinsta.com/blog/your-connection-is-not-private/

Maybe there's an idea in there that could help.

Thanks. I'll check it out.

 

[anorlunda]

If their certificate expired, it would affect everyone. I'm getting it fine on Chrome and Opera, but not on IOS. I would say it's Apple's problem.

 

[bob012345]

If their certificate expired, it would affect everyone. I'm getting it fine on Chrome and Opera, but not on IOS. I would say it's Apple's problem.

Thanks. It might be an Apple issue. On my mac mini which has Chrome Version 91.0.4472.114 it works but on my mac laptop with V94.0.4606.71 and on my old Ipad it doesn't. Since both use the same wi-fi it can't be the internet provider. Also, my Ipad did not get to Wiki on a Corner Bakery wi-fi this morning so it may be Apple.

 

[shemp]

I have a new KaiOS flip phone that I can surf the net on. As of two weeks ago Wikipedia no longer works on it as well.

 

[bob012345]

If their certificate expired, it would affect everyone. I'm getting it fine on Chrome and Opera, but not on IOS. I would say it's Apple's problem.

Isn't it probable that people have different certificates depending on a lot of factors? My certificate might expire now but yours in five years...

 

[pbuk]

NET::ERR_CERT_AUTHORITY_INVALID

This is almost always IME because your clock is wrong, often due to a timezone/daylight saving setting.

Isn't it probable that people have different certificates depending on a lot of factors? My certificate might expire now but yours in five years...

No, you don't have a certificate. The certificate belongs to the website owner and is sent by their web server.

 

[bob012345]

This is almost always IME because your clock is wrong, often due to a timezone/daylight saving setting.

I'll check into that, thanks.

 

[bob012345]

Turns out some apps say my clock is wrong but my clock appears to be correct.

 

[pbuk]

The internet runs on Universal Time and so the system clock must be correct in that frame. The time displayed in an app is local time, derived from (1) the system time (2) the system time zone setting (3) the system daylight saving setting. It is possible that there are compensating errors among (1) (2) and (3) causing the 'correct time' to be displayed.

Windows and the Linux kernel don't play together nicely in this respect: when dual booting (or even using a Linux VM) I have found that I often need to fix the time settings in Windows.

 

[vela]

No, you don't have a certificate. The certificate belongs to the website owner and is sent by their web server.

Each device has a set of root certificates used to validate the certificate the site sends. It's possible that you have an updated one and @bob012345 has an old one which expired.

Apple issues system updates with the new root certificates for supported systems. Some software maintains its own set of certificates instead of using the system-wide ones. In either case, you just need to stay updated with recent versions of the software.

If you're running an old version of the OS, Apple may not have issued an update for it. You can go to the issuing authority to download the latest root certificate and install it manually.

 

[anorlunda]

I use an iPad 2 that Apple stopped supporting a long time ago. I can't get updates.

In the past week, I've been having trouble on that iPad with several sites including Wikipedia.

 

[vela]

FYI, Let's Encrypt's root certificate expired on September 30. Wikipedia uses an SSL certificate signed by Let's Encrypt, so I'd guess that's the problem you're all seeing.

https://scotthelme.co.uk/lets-encrypt-old-root-expiration/

Here are links to the new root certificate. You only need one. Whatever system you're using might prefer one format over the other.

https://letsencrypt.org/certs/isrgrootx1.pem
https://letsencrypt.org/certs/isrgrootx1.der

 

[Tom.G]

Great info @vela !

Anyone know where I can find how to actually use OpenSSL.exe to manually install a certificate? I'm using OpenSSL ver. 0.9.7c. which reportedly has that functionality.

Thanks,
Tom

 

[pbuk]

FYI, Let's Encrypt's root certificate expired on September 30. Wikipedia uses an SSL certificate signed by Let's Encrypt, so I'd guess that's the problem you're all seeing.

Oh good catch @vela - this had completely passed me by.

I use an iPad 2 that Apple stopped supporting a long time ago. I can't get updates.

In the past week, I've been having trouble on that iPad with several sites including Wikipedia.

Caution: installing root certificates from links you find on the internet is a huge security risk. Type the following into your browser address bar and select 'install' in the dialog:
https://letsencrypt.org/certs/isrgrootx1.pem

I'm using OpenSSL ver. 0.9.7c. which reportedly has that functionality.

Can you not upgrade to something more recent? The current release of OpenSSL is 3.0.0, but you should at least go to 1.1.1l (that's a capital I at the end: what were they thinking?). This should use the root certs distributed with your OS: of course you also need to ensure your OS is up to date.

 

[Delta2]

I am not an expert but i would check for viruses and reinstall chrome.

 

[Tom.G]

Great info @vela !

Anyone know where I can find how to actually use OpenSSL.exe to manually install a certificate? I'm using OpenSSL ver. 0.9.7c. which reportedly has that functionality.

Thanks,
Tom

Thanks to @vela for links to the new certificates!

I discovered that certificate installation is a Browser function.

This works for older versions of Firefox (v 43.0.1):

1) Download one or both of these files and save somewhere on disk, I used the the .pem version

​

https://letsencrypt.org/certs/isrgrootx1.pem​

https://letsencrypt.org/certs/isrgrootx1.der​

​

2) In Firefox, in the menu bar click

Tools​

Options​

Advanced​

Certificates​

View Certificates​

3) In the pop-up window click the "Authorities " tab

​

click the "Import" button​

In the new "Select File..." pop-up, Navigate to where you saved the Certificate file and double-click on the file.​

4) Back out to the Firefox browser and you should be good to go without the "Untrusted " message.

Cheers,
Tom