[Bug 17783] steamcommunity.com certificate not recognised

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=17783


Paul "TBBle" Hampson <Paul.Hampson at Pobox.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |Paul.Hampson at Pobox.com




--- Comment #7 from Paul "TBBle" Hampson <Paul.Hampson at Pobox.com>  2009-04-18 10:50:42 ---
I can't confirm this right now, as I can't find my records from the time, but a
month or two ago Steam's certificates were incorrectly set up, and the
described error dialog was happening on Windows Internet Explorer 6 and Firefox
3 as well.

Basically, Steam's servers were not providing the full certificate chain from
their certificate to a trusted root certificate, so their certificate was being
rejected.

I'm fairly sure it's just a matter of installing the two certificates on
http://www.verisign.com/support/verisign-intermediate-ca/extended-validation-pro/index.html
into whatever wine-gecko is using as a certificate store. One of them is signed
by an existing trusted Verisign root certificate, the other is signed by the
former, and the Steam certificate is signed by the latter, completing the chain
of trust.

I suspect Steam's support only tested their new certificates with IE7, which
probably has the Verisign EV SGC certificates pre-installed.

If I'm wrong about the above URLs, the correct intermediate certificates were
found at the time by googling for the name of the signing certificate of the
Steam certificate that is failing.


-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.