What The Hell Is Up With Ronpaul2008.com

[rdenner]

I get ACCEPT CERTIFICATE when I go to the website.

THIS IS REALLY BAD!!


Get someone on the freaking phone and fix this immidiately!

BAD BAD TIMING...

Robert

[steph3n]

Cert is working quite fine here.

[Mort]

no problem here.

[Ozwest]

Talking about shooting yourself in the foot!

[T206]

I get ACCEPT CERTIFICATE when I go to the website.

THIS IS REALLY BAD!!


Get someone on the freaking phone and fix this immidiately!

BAD BAD TIMING...

Robert

You sure that isnt just you? I dont have any problems.

[BizmanUSA]

I'm on the site now & everything seems OK! :D

Went to at least one page back with NO trouble ;)

BizmanUSA

[Ozwest]

Yeah, Ive avoided the sight for obvious reasons, but no problems for me either, now that I've tried it.

[rdenner]

I saw a post about 10 down that said they were having the same problem... I went to the site and it happened to me..

Hopefully they were aware of it and fixed it..

Robert

[brumans]

I went to it like 5 minutes ago and now I just went to it and I got the pop-up message about the certificate...

[thehittgirl]

Why is that bad? Not as tech savvy as some here.

It worked after I clicked "accept certificate."

[LizF]

I haven't seen anything wrong/different w/the RP website. I use Firefox, btw.

[wsc321]

I think you'll only see the message if you omit "www" before ronpaul2008. So "www.ronpaul2008.com" does not appear to create the error.

[RobS]

If you go to the donate page, you will see the error. The reason is because the donate page is a HTTPS page, meaning all data going to and from it is encrypted. This is standard for pages that accept money.

The reason it is a big deal is that many new comers will wonder what the heck is wrong and might be scared off by techno jargon or by feeling their money isn't safe.

[givemeliberty]

it is a misconfigured certificate set to "localhost@localdomain" the need to set this to "ronpaul2008.com" ASAP and I mean ASAP. Fickle users will turn away in droves, tech savvy will know to accept the cert.

[werdd]

I get ACCEPT CERTIFICATE when I go to the website.

THIS IS REALLY BAD!!


Get someone on the freaking phone and fix this immidiately!

BAD BAD TIMING...

Robert

yeah i got this earlier too, it seems fine now

[misconstrued]

This is a big problem. Someone needs to alert the campaign about this ASAP!

[givemeliberty]

Yes Please Contact Someone!

[Ninja Homer]

Works fine for me, and their cert is good until June 2008. It may have just been a little server blip... stuff like that happens all the time, no matter how good the site/servers are. Nothing to worry about.

[Mark]

.

well.. using Opera as my browser.. plain ol'..

ronpaul2008.com = worked for me

went to 'donate' page == worked too.. no certificate pop-up at all


maybe.. check your browser settings to see if it's configured correctly?

.

[givemeliberty]

If you already accepted the certificate you will no longer see the pop up. The server admin still needs to be notified. If people notice a problem eith the sites security they will turn away. Better safe than sorry!

[zebov]

For everyone that is saying it is a "browser setting," NO, it is NOT. This is a bad certificate. And I would say that it would bother tech-savvy users MORE than the less tech-savvy. A bad certificate on an otherwise reputable site is a red flag that something's been hacked. I'm not saying something HAS been hacked, but this is what the tech-savvy will think. Why will they think it is hacked? Because no reputable site in its right mind would have a bad certificate. Ever.

EDIT: Just imagine going to buy something at Amazon and you get the same warning. You would stop IMMEDIATELY thinking, "Something is funky; why would Amazon not have a good cert? I'd better wait to place my order before this gets sorted out."

[Ninja Homer]

1. What url are you going to that is giving you the warning?
2. What button are you clicking on that brings you to that url?

The certificate is working perfectly fine, but it is for "www.ronpaul2008.com".
So, this works:
https://www.ronpaul2008.com/donate/

But, this doesn't, because it doesn't have the "www" in it:
https://ronpaul2008.com/donate/

If there is a link somewhere that goes to the second one, leaving out the "www", then that link should be fixed.

[zebov]

The certificate being issued when I go to
https://www.ronpaul2008.com/donate/

contains the "default" information in all the fields (organization, etc. etc.). It is valid 10/16/2007-10/17/2008.

For those of you not getting this error message, there is a chance that you have put "SomeOrganization" in the list of "trusted" certificate issuers or the browser settings are less stringent.

Can someone who does not get the error let me know what the certificate details show up as for them (organization issuing/receiving cert, host issuing/receiving cert, validity date range, etc.)? It'd be nice to know is we're getting the same certificate (there's a chance that the https site is run on multiple servers and some of the servers are configured wrong while others are configured correctly.

[thehittgirl]

Yeah I didn't think of that, that people wouldn't want to click on the link if they see that. I tend to be daring...probably a little too much sometimes.

[givemeliberty]

Its fixed now.

Yes, tech savvy may be more inclined to suspect but at the same time the tech-savvy users would likely know that it was just a misconfiguration and go ahead and accept the cert but a newbie would be less inclined to trust the misconfigured cert. kinda backasswards I know but there ya go.

[zebov]

Its fixed now.

Yes, tech savvy may be more inclined to suspect but at the same time the tech-savvy users would likely know that it was just a misconfiguration and go ahead and accept the cert but a newbie would be less inclined to trust the misconfigured cert. kinda backasswards I know but there ya go.

I'm still getting the same "localhost" certificate.

[peruvianRP]

nah.... is your setting. Are you using IE, Firefox or Opera?

I tired all 3 and is fine.

[Hurricane Bruiser]

I had a certificate problem also just now using IE

[zebov]

Would someone who is NOT having a cert problem please check the certificate and tell us the details so we can determine at LEAST if we're all getting the same certificate?



EDIT: For comparison's sake, this is the certificate I am getting when going to https://www.ronpaul2008.com/donate/ :



Certificate Signature Algorithm
-------------------------------
PKCS #1 MD5 With RSA Encryption

Public Key Algorithm
--------------------
PKCS #1 RSA Encryption

Signature Algorithm
-------------------
PKCS #1 MD5 With RSA Encryption

Certificate Version
-------------------
Version 3

Issued By
---------
Email: root@localhost.localdomain
Common Name: localhost.localdomain
Organization: SomeOrganization
Organizational Unit: SomeOrganizationalUnit
City: SomeCity
State: SomeState
Country: --

Issued To
---------
Email: root@localhost.localdomain
Common Name: localhost.localdomain
Organization: SomeOrganization
Organizational Unit: SomeOrganizationalUnit
City: SomeCity
State: SomeState
Country: --
Serial Number: 00

Validity
--------
Issued On: 10/17/2007
Expires On: 10/16/2008

[werdd]

i thought it was really weird as well, i thought the site might have been hacked, but i accepted the certificate, and my pc is fine so ;/

[misconstrued]

IT IS NOT FIXED! IE7 WILL NOT EVEN OPEN THE DONATION PAGE!!!!

This is the error:

There is a problem with this website's security certificate.


The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended).
More information


If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting.
When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com.
If you choose to ignore this error and continue, do not enter private information into the website.

For more information, see "Certificate Errors" in Internet Explorer Help.

[werdd]

IT IS NOT FIXED! IE7 WILL NOT EVEN OPEN THE DONATION PAGE!!!!

This is the error:

There is a problem with this website's security certificate.


The security certificate presented by this website was not issued by a trusted certificate authority.
The security certificate presented by this website was issued for a different website's address.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue to this website.
Click here to close this webpage.
Continue to this website (not recommended).
More information


If you arrived at this page by clicking a link, check the website address in the address bar to be sure that it is the address you were expecting.
When going to a website with an address such as https://example.com, try adding the 'www' to the address, https://www.example.com.
If you choose to ignore this error and continue, do not enter private information into the website.

For more information, see "Certificate Errors" in Internet Explorer Help.



i hope hq knows about this :(

[Mani]

i hope hq knows about this :(


Has anyone called them? We don't need 500 people calling them, just one.

[zebov]

Has anyone called them? We don't need 500 people calling them, just one.
I have not and don't have access to a phone right now. Can somebody please call and then confirm on this thread that you called?

[zebov]

(in case you can't tell, I'm very concerned about this and really wish I could do more to help out. I'm sure lot's of folks will be checking out the site today since it is the day after Leno and I'd hate to lose donations and visitors because of something as careless as this. Someone please call and let us know you did so [again, I don't have access to a phone or I would]).

[Kacela]

The donation page loads fine for me at the URL https://www.ronpaul2008.com/donate/ but when the "www" is omitted at https://ronpaul2008.com/donate/ , I get the Certificate Error.

The general tab of the certificate referenced at the proper URL of https://www.ronpaul2008.com/donate/ says:

Issued to: www.ronpaul2008.com
Issued by: Thawte Server CA
Valid from 6/3/2007 to 6/2/2008

So the problem is the use of the incorrect URL, omitting the "www" in the address. Perhaps the campaign can redirect URL's missing the "www" to the correct address?

[Ninja Homer]

The donation page loads fine for me at the URL https://www.ronpaul2008.com/donate/ but when the "www" is omitted at https://ronpaul2008.com/donate/ , I get the Certificate Error.

The general tab of the certificate referenced at the proper URL of https://www.ronpaul2008.com/donate/ says:


So the problem is the use of the incorrect URL, omitting the "www" in the address. Perhaps the campaign can redirect URL's missing the "www" to the correct address?

I get the same.

However, the site is probably set up with multiple servers. What will happen is when you go to the site, a directing server will direct you to another web server that serves you the web info. The directing server will normally keep sending you to the same web server when you keep visiting the site, until the session times out. It could be that one of the servers doesn't have the secure certificate set up properly. Because you keep visiting the site, the session hasn't timed out so you keep hitting that same server with the incorrect certificate.

They probably added a server recently, expecting more traffic from being on Leno. That's probably the server that's causing the problems.

[misconstrued]

I get the same.

However, the site is probably set up with multiple servers. What will happen is when you go to the site, a directing server will direct you to another web server that serves you the web info. The directing server will normally keep sending you to the same web server when you keep visiting the site, until the session times out. It could be that one of the servers doesn't have the secure certificate set up properly. Because you keep visiting the site, the session hasn't timed out so you keep hitting that same server with the incorrect certificate.

They probably added a server recently, expecting more traffic from being on Leno. That's probably the server that's causing the problems.

It's not that it's on multiple servers. They updated the SSL cert and whoever did it was an idiot and completely screwed it up. We've lost of a lot of money from this mistake. No question about it.

[Mort]

It's not that it's on multiple servers. They updated the SSL cert and whoever did it was an idiot and completely screwed it up. We've lost of a lot of money from this mistake. No question about it.

It is a mistake for sure.
Do you think it is that bad though? If they say yes they continue as normal right?

[allyinoh]

I don't have any problems... Good for me!

[misconstrued]

It is a mistake for sure.
Do you think it is that bad though? If they say yes they continue as normal right?

Considering "normal" security settings in IE7 won't even load the page at all and that is how most people will see it... Yes, it's terrible.

[Craig_R]

I just went to donate and got the same error message. Before I came here to see if others had the same problem, I emailed the campaign about it at mail@ronpaul2008.com. Hopefully someone gets this fixed pronto because I want to donate (more) before the month is over, but i'm not going to if I'm not sure the site isnt hacked.

[Craig_R]

oops.

[honkywill]

I got the same thing.

Maybe it's just firefox?

[misconstrued]

It's firefox and IE. Any browser really. The site isn't hacked. Just someone uploaded a bad cert.

[Craig_R]

Brandon at HQ asked to be emailed a print screen of the error. I already clicked past the error and cant seem to get it to come back if someone else here is getting the error please do a print screen and send it to Brandon@ronpaul2008.com

[misconstrued]

seems it is fixed now. they should ask their server admin about this... ;)

[Kacela]

Brandon at HQ asked to be emailed a print screen of the error. I already clicked past the error and cant seem to get it to come back if someone else here is getting the error please do a print screen and send it to Brandon@ronpaul2008.com

Email sent with this screenshot image referenced: http://img.photobucket.com/albums/v717/Kacela/CertError.png

Again, I can only get the error to generate when I leave the "www" out of the Donation page's URL.

[gjdavis60]

I'm still getting the error anytime I reference a secure page (https) on their site. They have a certificate problem and need to fix it.

[Craig_R]

Email sent with this screenshot image referenced: http://img.photobucket.com/albums/v717/Kacela/CertError.png

Again, I can only get the error to generate when I leave the "www" out of the Donation page's URL.

I get it either way

[Craig_R]

please nobody else email brandon. I'm sure he's on it.

[misconstrued]

I get it either way

Did you try completely closing your browser and then opening the page again?

[LibertyEagle]

I'm not having a problem at all.

Oops. I see it. When you click on a secure page. I did call Brandon. They know about it and are fixing it right now.

Bad day to have a problem with the donation page. :(

[Craig_R]

Did you try completely closing your browser and then opening the page again?

yeah, i'm using IE7 and I get a bad cert every time I go to the dontate page

[Ninja Homer]

It's not that it's on multiple servers. They updated the SSL cert and whoever did it was an idiot and completely screwed it up. We've lost of a lot of money from this mistake. No question about it.

No, the problem isn't that it's on multiple servers, but it's probably that they added another server to handle more visitors, and forgot to set up the cert on the new server. Obviously, some of the servers have the cert set up properly, because it's working perfectly for some of us. They haven't updated the cert... it is the same one they've had since June, and it's good through June '08.