[Jeremie Larin]

Hi guys,

I am having a issue with accessing www.synology.com/support. It's always telling me that the site is blocked because of a SSL issue. I would still like to access the site. How would I do that? I have attached a picture of the error.


Posted via CB10

[Uzi]

I think you must use another browser

[Richard Buckley]

Are you sure you want to go to that site?




LeapSTR100-2/10.3.2.2876

[Uzi]

Hmm sometimes false 'warning' ? Maybe it is legit site for op BTW load fine on chrome

[Uzi]

Attached

[chopachain]

I'm seeing a lot of this lately on my Passport. Not sure if this is good or bad.

[Erik_1991]

Get these messages often when trying to use a website that belongs to the Dutch government.. e.g. the vehicle registration website RDW



Something to do with the certificate, although I guess it's more of a BlackBerry problem than a website problem... or the government is as corrupt as 'they' say haha

BlackBerry Passport Silver Edition 

[MaxFresh]

You know you can just click the expand for details and allow site certificate as trusted and it goes to the page

Posted via CB10

[Erik_1991]

You know you can just click the expand for details and allow site certificate as trusted and it goes to the page

Posted via CB10

No you can't.. some sites indeed you can expand and press that you understand the risks and continue. But in some cases it blocked the site and that's it... you can't enter it

[edit] It's the one with the explanation mark that you can proceed to

BlackBerry Passport Silver Edition 

[Richard Buckley]

Definitely something hinky going on. This is the certificate chain presented to my BlackBerry



And this is presented to my Firefox on my desktop




The site shouldn't be serving up different certificates to different devices.

LeapSTR100-2/10.3.2.2876

[Magnetic_dud]

I started to get this errors even for Wikipedia. Looks like BlackBerry need to update the root certificates...

[Uzi]

I started to get this errors even for Wikipedia. Looks like BlackBerry need to update the root certificates...

Yeah I remember your thread

[valiant29]

I am also getting " site blocked " for many legit sites since yesterday. Those sites opens perfectly on desktop computer. i.e. no risk warning error.

Posted via CB10

[DaDaDogg]

It works for me with the native Browser, but I haven't updated my Leap because the latest OS made my Z10 buggy as He||.

[DaDaDogg]

[kiomon]

One thing I have found is that BlackBerry doesn't trust any of the "Let's Encrypt' certificate chains. So if a site uses one of those then it will come up with the warning. Wordpress for example just launched SSL encryption for all their hosted blogs and now that warning pops up and you have to add an exception to view. Curious to see when and if BlackBerry updates the browser. I worry things are getting sadd in BB10 land

Posted via CB10

[rthonpm]

One thing I have found is that BlackBerry doesn't trust any of the "Let's Encrypt' certificate chains. So if a site uses one of those then it will come up with the warning. Wordpress for example just launched SSL encryption for all their hosted blogs and now that warning pops up and you have to add an exception to view. Curious to see when and if BlackBerry updates the browser. I worry things are getting sadd in BB10 land

Posted via CB10

You can also just get the certificates from the Let's Encrypt site and import them into your handset yourself.

Posted via CB10

[nandehutu]

Hi guys,

I am having a issue with accessing www.synology.com/support. It's always telling me that the site is blocked because of a SSL issue. I would still like to access the site. How would I do that? I have attached a picture of the error.


Posted via CB10

Importing the cert below (settings > security&privacy > certificates) fixes the problem:
https://www.amazontrust.com/repository/SFSRootCAG2.pem

Posted via CB10

[brightberry]

Yeah I get the same warning for my own blog location on WordPress. But it does the same thing outside of the app, so is the browser...any easy fixes?

Posted via CB10

[brightberry]

How do I import this?

Posted via CB10

[moyah8]

I thought I was alone on this issue!!

Attachment 404662

I've been getting it very often too.. the first being for Synology.

Posted via CB10 on my ClassicSQC100-1/10.3.2.2876

[Richard Buckley]

I recently migrated a site from using Apache to using Nginx. My CA provides different certificate bundles for these (and other) servers, but Nginx started fine using the Apache bundle and all the desktop browsers displayed the pages, so I used the installed bundle while testing the new installation. When I tested it with my BlackBerrys I was surprised to see this same error. When I installed the certificate bundle built for Nginx the problem went away.

For these reasons I now believe that this is caused by a subtle misconfiguration of the server that the BlackBerry cryptography is picking up.

LeapSTR100-2/10.3.2.2876

[moyah8]

I recently migrated a site from using Apache to using Nginx. My CA provides different certificate bundles for these (and other) servers, but Nginx started fine using the Apache bundle and all the desktop browsers displayed the pages, so I used the installed bundle while testing the new installation. When I tested it with my BlackBerrys I was surprised to see this same error. When I installed the certificate bundle built for Nginx the problem went away.

For these reasons I now believe that this is caused by a subtle misconfiguration of the server that the BlackBerry cryptography is picking up.

LeapSTR100-2/10.3.2.2876

Thanks for the explanation. Sounds logical...

It's sh*t like this we don't need. Come on BlackBerry, lay off the Android and make this thing work. Or, if you must dab with Android, atleast keep the boat a float for us (the few) that choose to still use BB10. :-(

Posted via CB10 on my ClassicSQC100-1/10.3.2.2876

[jasonvan9]

Thanks for the explanation. Sounds logical...

It's sh*t like this we don't need. Come on BlackBerry, lay off the Android and make this thing work. Or, if you must dab with Android, atleast keep the boat a float for us (the few) that choose to still use BB10. :-(

Posted via CB10 on my ClassicSQC100-1/10.3.2.2876

agreed x1000

browser has been acting screwy the last little while as well.. not impressed!

Posted via CB10

[Richard Buckley]

Thanks for the explanation. Sounds logical...

It's sh*t like this we don't need. Come on BlackBerry, lay off the Android and make this thing work. Or, if you must dab with Android, atleast keep the boat a float for us (the few) that choose to still use BB10. :-(

Posted via CB10 on my ClassicSQC100-1/10.3.2.2876

On the other hand if the misconfiguation leads to reduced securit then BlackBerry is doing the right thing.