It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
General discussion (archive)Security Certificate has been revoked(19 posts)(19 posts)
(19 posts)
Pages:
1
2
This is my favourite topic
Posted April 15, 2014
Hi All,

I have just started getting the following error when going to the GoG website

The security certificate for this site has been revoked.

This site should not be trusted.

Any ideas, from what I can tell GoG is the only site giving me this error.

Regards
Sub
Attachments:
gog_error.png (37 Kb)
Post edited April 15, 2014 by Sublym3
No posts in this topic were marked as the solution yet. If you can help, add your reply
Posted April 15, 2014
what av do you use and with what browser?
Posted April 15, 2014
Refresh everything. After the Heart Bleed bug snafu, GOG.com probably changed its certificate; that alone would be futile if the old one wasn't voided afterwards.
Posted April 15, 2014
avatar
GastonArg: what av do you use and with what browser?
MSE + EMET 4.1 & Malwarebytes (not real-time)

Internet Explorer 11
avatar
stan423321: Refresh everything. After the Heart Bleed bug snafu, GOG.com probably changed its certificate; that alone would be futile if the old one wasn't voided afterwards.
What exactly do I refresh?
Posted April 15, 2014
Refreshing the site with Ctrl-R might be sufficient, but if it doesn't, you can clear Windows' certificate cache, specifically the revoked cert list. To do this, open your command prompt (Winkey+R -> cmd -> Enter) and input these commands:
certutil -urlcache crl delete
certutil -urlcache ocsp delete
Post edited April 15, 2014 by Firek
Posted April 15, 2014
avatar
Firek: Refreshing the site with Ctrl-R might be sufficient, but if it doesn't, you can clear Windows' certificate cache, specifically the revoked cert list. To do this, open your command prompt (Winkey+R -> cmd -> Enter) and input these commands:
certutil -urlcache crl delete
certutil -urlcache ocsp delete
Thanks for the reply Firek, however I have run both commands and still getting the error
Posted April 15, 2014
avatar
Firek: Refreshing the site with Ctrl-R might be sufficient, but if it doesn't, you can clear Windows' certificate cache, specifically the revoked cert list. To do this, open your command prompt (Winkey+R -> cmd -> Enter) and input these commands:
certutil -urlcache crl delete
certutil -urlcache ocsp delete
There were reports that the servant-1.gog.com server is still using the old certificate, thus producing the warnings. Was that fixed or not?
Posted April 15, 2014
did you try with another browser ?
avatar
Firek: Refreshing the site with Ctrl-R might be sufficient, but if it doesn't, you can clear Windows' certificate cache, specifically the revoked cert list. To do this, open your command prompt (Winkey+R -> cmd -> Enter) and input these commands:
certutil -urlcache crl delete
certutil -urlcache ocsp delete
avatar
JMich: There were reports that the servant-1.gog.com server is still using the old certificate, thus producing the warnings. Was that fixed or not?
it was according to this thread
http://www.gog.com/forum/general/attention_why_you_shouldnt_buy_a_game_at_the_moment_severe_securityvulnerability
Posted April 15, 2014
avatar
GastonArg: it was according to this thread
http://www.gog.com/forum/general/attention_why_you_shouldnt_buy_a_game_at_the_moment_severe_securityvulnerability
This one actually.
Posted April 15, 2014
I am also getting this message on my Surface RT.
Posted April 15, 2014
If it helps, I don't get the error on every page/area of GoG. The error will always appear (for me) on the checkout page and the 'My Account' page.

It seems I can browse games and the forums without issue.
Posted April 15, 2014
It's up to you, but you might find it a good idea to download another browser like Firefox. Internet Explorer is notorious for being rather weak in the security department, and also doesn't work on certain websites (not including GOG). Up to you, but I'd highly recommend changing.

The problem isn't occuring for me on Firefox: perhaps it's an IE issue?
Post edited April 15, 2014 by pi4t
Posted April 15, 2014
avatar
pi4t: The problem isn't occuring for me on Firefox: perhaps it's an IE issue?
IE11 displays a message. Chrome and Firefox report the "Revoked Certificate" on the console. Which is a better way to report it is up to the user I guess.
Posted April 15, 2014
IT IS IE 11!!!

This is what happened to me a few days ago, I even started a thread about it. A few hours later someone else started another thread about it.

I have always adored IE 11 but when it became clear how totally fucked up 11 is I finally got rid of it and went Firefox. No problems now. :D
Post edited April 15, 2014 by tinyE
Posted April 15, 2014
avatar
pi4t: The problem isn't occuring for me on Firefox: perhaps it's an IE issue?
The problem comes from an ajax call to https://servant-1.gog.com (which still has the old, revoked certificate) which happens every 5 seconds or so. Firefox sees that the certificate is invalid and quietly rejects reponses. IE sees that the certificate is invalid and loudly rejects reponses. Both approaches have their merits - I definitely prefer Firefox's, but if it were not for IE we probably wouldn't have realised that servant-1 had a certificate problem.
Pages:
1
2
This is my favourite topic
Community
General discussion (archive)Security Certificate has been revoked(19 posts)(19 posts)
(19 posts)