SSL error no cypher overlap

Page 3 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Toggle sidebar Toggle sidebar
Titillating

Titillating

Assistant Community Manager
Sep 9, 2014
423
70
66
KillerBee said:
In case you missed the other thread check out this article
Here's the same problem from that same akamai.net ( 2 and 1/2 years ago)
http://www.zdnet.com/article/akamais-https-fail-sets-a-bad-example/


ironically just started seeing this error now again
The certificate is only valid for the following names: a248.e.akamai.net, *.akamaihd.net, *.akamaihd-staging.net, *.akamaized.net, *.akamaized-staging.net
Click to expand...

Been following this thread, as well as the other. I've escalated this matter up to our network guys, who are looking into it. Progress has been slow, since we haven't been able to reproduce these, but we've been working with our CDN on it.
 
Titillating

Titillating

Assistant Community Manager
Sep 9, 2014
423
70
66
For those of you getting the invalid certificate error (not the SSL error, which appears to have been resolved):

Next time you run into these, please ping forums.anandtech.com and let me know what IP address is returned. As @KillerBee pointed out, this is most likely an Akamai issue (and not an uncommon one at that) where some users are hitting the non-secure servers for whatever reason.
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
Just happened again.
forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaihd.net, *.akamaihd-staging.net, *.akamaized.net, *.akamaized-staging.net

Error code: SSL_ERROR_BAD_CERT_DOMAIN

Then did 3 quick pings in a row ...I
The IP changes quick so not sure how valid a test that is for which IP caused it.

23.55.57.8
23.55.57.10
23.55.57.25


------------------------------------------------------------------------
C:\Users\joe>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [23.55.57.8] with 32 bytes of data:
Reply from 23.55.57.8: bytes=32 time=17ms TTL=57
Reply from 23.55.57.8: bytes=32 time=16ms TTL=57
Reply from 23.55.57.8: bytes=32 time=16ms TTL=57
Reply from 23.55.57.8: bytes=32 time=16ms TTL=57

Ping statistics for 23.55.57.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 16ms, Maximum = 17ms, Average = 16ms

C:\Users\joe>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [23.55.57.10] with 32 bytes of data:
Reply from 23.55.57.10: bytes=32 time=15ms TTL=57
Reply from 23.55.57.10: bytes=32 time=15ms TTL=57
Reply from 23.55.57.10: bytes=32 time=15ms TTL=57
Reply from 23.55.57.10: bytes=32 time=16ms TTL=57

Ping statistics for 23.55.57.10:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 15ms, Maximum = 16ms, Average = 15ms

C:\Users\joe>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [23.55.57.25] with 32 bytes of data:
Reply from 23.55.57.25: bytes=32 time=19ms TTL=57
Reply from 23.55.57.25: bytes=32 time=31ms TTL=57
Reply from 23.55.57.25: bytes=32 time=23ms TTL=57
Reply from 23.55.57.25: bytes=32 time=15ms TTL=57

Ping statistics for 23.55.57.25:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 15ms, Maximum = 31ms, Average = 22ms

-------------------------------------------------------------------------
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
note: Be sure to check you don't already have an Exception for the certificate in your browser
 
Titillating

Titillating

Assistant Community Manager
Sep 9, 2014
423
70
66
Alright, we believe we've identified the problem, and a fix was pushed live a few moments ago. Many thanks to @KillerBee for the assistance :)

If either of these errors come up again (SSL or invalid certificate), please let me know right away.
 
nakedfrog

nakedfrog

No Lifer
Apr 3, 2001
61,047
16,454
136
Still none of the cypher errors on my front, and I haven't seen the Akamai one at all.
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
The error showed up again today.

forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net

Error code: SSL_ERROR_BAD_CERT_DOMAIN

----------------------------------------------------
Same name but different IP

C:\Users\joe>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [204.237.142.26] with 32 bytes of data:
Reply from 204.237.142.26: bytes=32 time=12ms TTL=57

-------------------------------------------------------------
C:\Users\joe>date
The current date is: Sun 09/18/2016
Enter the new date: (mm-dd-yy)

C:\Users\joe>time
The current time is: 12:09:44.95
Enter the new time:

---------------------------------------------------
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
... followed by another 20 minutes later (same error) with new IP


C:\Users\joe>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [72.37.164.245] with 32 bytes of data:
Reply from 72.37.164.245: bytes=32 time=17ms TTL=57
 
S

Spacehead

Lifer
Jun 2, 2002
13,067
9,858
136
I just got this too maybe 5 minutes ago.

forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net Error code: SSL_ERROR_BAD_CERT_DOMAIN

Here's the ping info:
C:\Documents and Settings\xxx>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [65.202.184.170] with 32 bytes of data:

Reply from 65.202.184.170: bytes=32 time=51ms TTL=60
Reply from 65.202.184.170: bytes=32 time=50ms TTL=60
Reply from 65.202.184.170: bytes=32 time=52ms TTL=60
Reply from 65.202.184.170: bytes=32 time=65ms TTL=60

Ping statistics for 65.202.184.170:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 50ms, Maximum = 65ms, Average = 54ms

I'm using Firefox 47.0.1 if it matters
 
Titillating

Titillating

Assistant Community Manager
Sep 9, 2014
423
70
66
Ack. Thanks, guys. I'll bring this up during today's meeting. Appreciate you guys including the ping results.
 
dualsmp

dualsmp

Golden Member
Aug 16, 2003
1,627
45
91
My browser flip flops from partially encrypted to fully encrypted depending on which page I'm on.

This very thread the first two pages are shown as partially encrypted, however the 3rd page (the page I'm responding on now) shows fully encrypted.

Edit: Maybe the first two pages show partially encrypted because both have images on them linked from other domains?
 
Last edited:
S

Spacehead

Lifer
Jun 2, 2002
13,067
9,858
136
dualsmp said:
Edit: Maybe the first two pages show partially encrypted because both have images on them linked from other domains?
Click to expand...
Yeah, that's it. It had me confused for a little while too till i realized. If someone posts images from a https hosting site you won't get the mixed content alert.
 
  • Like
Reactions: Ken g6
Eug

Eug

Lifer
Mar 11, 2000
23,994
1,617
126
I was getting this on Win 7 and Chrome last week. iOS 10.0.1 was fine but I just upgraded to 10.1 beta and Safari now gives me this. Not sure if it's related.

35D999C7-26D3-4A02-9D8F-CA72A858DA54_zpsliocu8hv.png


E6C8983A-CA99-4C94-B436-F05261B41010_zpsh1uo2ler.png


DF0824B8-A2F3-4451-880E-280C16D80C9C_zpsirzb447q.png
 
renz20003

renz20003

Platinum Member
Mar 14, 2011
2,714
634
136
Eug said:
I was getting this on Win 7 and Chrome last week. iOS 10.0.1 was fine but I just upgraded to 10.1 beta and Safari now gives me this. Not sure if it's related.

35D999C7-26D3-4A02-9D8F-CA72A858DA54_zpsliocu8hv.png


E6C8983A-CA99-4C94-B436-F05261B41010_zpsh1uo2ler.png


DF0824B8-A2F3-4451-880E-280C16D80C9C_zpsirzb447q.png
Click to expand...

Same issue.

iPhone 5 with iOS 9.3.2
 
Pulsar

Pulsar

Diamond Member
Mar 3, 2003
5,224
306
126
Same issue. Chrome.

This server could not prove that it is forums.anandtech.com; its security certificate is from a248.e.akamai.net. This may be caused by a misconfiguration or an attacker intercepting your connection.
 
nakedfrog

nakedfrog

No Lifer
Apr 3, 2001
61,047
16,454
136
+1, Firefox, seeing this error:

forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net Error code: SSL_ERROR_BAD_CERT_DOMAIN
 
  • Like
Reactions: sandorski
Ken g6

Ken g6

Programming Moderator, Elite Member
Moderator
Dec 11, 1999
16,563
4,478
75
nakedfrog said:
+1, Firefox, seeing this error:

forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net Error code: SSL_ERROR_BAD_CERT_DOMAIN
Click to expand...
I finally added a permanent security exception for this on my desktop.
 
allisolm

allisolm

Elite Member
Administrator
Jan 2, 2001
25,187
4,747
136
Got the invalid security certificate thing yesterday and again today.
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
Ken g6 said:
I finally added a permanent security exception for this on my desktop.
Click to expand...

It seems to work for me too after adding it.
At least now when I get banned again I can blame it on the disgruntled Akamai ex-employee posting in my name after intercepting my password :D

Thankfully none of my banking sites seem to use Akamai
 
Last edited:
  • Like
Reactions: Ken g6
Titillating

Titillating

Assistant Community Manager
Sep 9, 2014
423
70
66
Many apologies for the long, long wait on this.

We're fairly certain that all these invalid cert issues should now be resolved. The Akamai staff have taken a number of steps internally (the issue was on their end) and assure us that this should not happen again. If it does though, please let us know and we'll go right back to yelling at them about it ;)
 
KillerBee

KillerBee

Golden Member
Jul 2, 2010
1,750
82
91
Titillating said:
Many apologies for the long, long wait on this.

We're fairly certain that all these invalid cert issues should now be resolved. The Akamai staff have taken a number of steps internally (the issue was on their end) and assure us that this should not happen again. If it does though, please let us know and we'll go right back to yelling at them about it ;)
Click to expand...

Oh well, it's still happening - after reloading the page (was using the 'new posts' link at the time ) a couple times it works again.

forums.anandtech.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net, *.akamaized.net, *.akamaihd-staging.net, *.akamaihd.net, *.akamaized-staging.net Error code: SSL_ERROR_BAD_CERT_DOMAIN

10/22/2016 @10:12 AM EST
23.55.57.147
23.55.57.115

10/22/2016 @10:50 AM EST
23.43.165.203
 
I

iCyborg

Golden Member
Aug 8, 2008
1,337
59
91
Same error here:

C:\Users\***>ping forums.anandtech.com

Pinging e12200.e12.akamaiedge.net [209.148.192.75] with 32 bytes of data:
Reply from 209.148.192.75: bytes=32 time=17ms TTL=59
Reply from 209.148.192.75: bytes=32 time=19ms TTL=59
Reply from 209.148.192.75: bytes=32 time=17ms TTL=59
Reply from 209.148.192.75: bytes=32 time=14ms TTL=59

Ping statistics for 209.148.192.75:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 14ms, Maximum = 19ms, Average = 16ms
 
S

Spacehead

Lifer
Jun 2, 2002
13,067
9,858
136
I just got warning from Firefox:
Your connection is not secure

The owner of forums.anandtech.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.
forums.anandtech.com uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe.
Advanced info: SSL_ERROR_NO_CYPHER_OVERLAP
(Not secure) Try loading forums.anandtech.com using outdated security
Click to expand...

Ping results:
Pinging e12200.e12.akamaiedge.net [65.151.23.144]
(i assume that's all the info you need?)

I was in OT at the time reading the "What do you guys do on the weekend?" & clicked to go to page 2 when it happened.
 
Last edited:
You must log in or register to reply here.

TRENDING THREADS

COMPANY
RESOURCES
FOLLOW
Top Bottom