Netgate SG-1000 microFirewall

Author Topic: No way to download pfsense  (Read 4019 times)

0 Members and 1 Guest are viewing this topic.

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
No way to download pfsense
« on: September 21, 2015, 04:04:35 am »
Hi!

I wanted to make a fresh install of 2.2.4 32bit nano/serial/4GB and tried to download. All European sites are not reachable, time out etc.

For the Austin/NY site Firefox (up to date, both Linux and Win 7) does not establish a secure connection (see below), BluegrassNet also "unable to connect".

So currently no way to download pfsense?

Regards

chemlud

PS: attaching .jpg is beyond the capabilities of this forum, so the error from Texas/NY is "This connection is untrusted" and "invalid security certificate"
« Last Edit: September 21, 2015, 04:07:49 am by 2chemlud »

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: No way to download pfsense
« Reply #1 on: September 21, 2015, 04:11:16 am »
Tried it from two different connections, cable and fibre, same result... What's next?

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
« Last Edit: September 21, 2015, 04:18:13 am by doktornotor »
Do NOT PM for help!

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: No way to download pfsense
« Reply #3 on: September 21, 2015, 04:17:13 am »
I can not connect to any of the six mirrors, sorry... Here the error for Austin and NY:


files.nyi.pfsense.org uses an invalid security certificate. The certificate is only valid for the following names: *.pfsense.org, pfsense.org (Error code: ssl_error_bad_cert_domain)


files.atx.pfsense.org uses an invalid security certificate. The certificate is only valid for the following names: *.pfsense.org, pfsense.org (Error code: ssl_error_bad_cert_domain)

Results in:

This Connection is Untrusted

You have asked Firefox to connect securely to files.nyi.pfsense.org, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

This site uses HTTP Strict Transport Security (HSTS) to specify that Firefox only connect to it securely. As a result, it is not possible to add an exception for this certificate.

____________________

Dunno what to tell the providers. You want to suggest it's some kind of crippled internet in Sweden? The mother of all democracy? :-D

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #4 on: September 21, 2015, 04:18:53 am »
Uh... Have you considered using HTTP? It's not like those links on the download page are HTTPS either. You told us "all European sites are not reachable, time out" - no, they don't.
Do NOT PM for help!

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: No way to download pfsense
« Reply #5 on: September 21, 2015, 04:20:29 am »
https-everywhere is running on firefox...

hasn't been a problem in the past, anyways...

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #6 on: September 21, 2015, 04:21:14 am »
There's nothing like installing idiotic browser extensions. Have a nice day.
Do NOT PM for help!

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: No way to download pfsense
« Reply #7 on: September 21, 2015, 04:24:18 am »
Du mich auch... :-p

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #8 on: September 21, 2015, 04:42:10 am »
PS: attaching .jpg is beyond the capabilities of this forum, so the error from Texas/NY is "This connection is untrusted" and "invalid security certificate"

BTW, attaching jpg here works fine... perhaps look into removing couple more of your browser "improvements".
Do NOT PM for help!

BlueKobold

  • Guest
Re: No way to download pfsense
« Reply #9 on: September 21, 2015, 08:50:40 am »
Germany, ISP German Telekom, time is 15:46 here, no chance to download the files with Opera latest and FF
latest without any extensions!

With MS IE11 & IE12 the downloads are starting immediately or instantly.

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #10 on: September 21, 2015, 09:10:17 am »
Are you as well trying via HTTPS? Then stop.
Do NOT PM for help!

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 15119
  • Karma: +1410/-206
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #11 on: September 21, 2015, 09:43:30 am »
The certs being used show as valid via every single check I can think to do on them.. They are clearly wild card certs.. this kind of makes that obvious *.pfsense.org

As to using https to mirrors.. That would be up to the mirrors themselves if they support https or not and certs used again would be on them.

As to attaching jpg files there is no issues that I see with doing that, how about not putting in spaces of files names your trying to attach to some system to use.

I have accessed it with ie, firefox, chrome without any issues.
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.4.2-RELEASE-p1 (work)
1x SG-4860 2.4.2-RELEASE-p1 (home)

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8553
  • Karma: +962/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: No way to download pfsense
« Reply #12 on: September 21, 2015, 10:23:30 am »
Yeah, there's no problem with certs where they are used. When people switch HTTP links to HTTPS on download mirrors or whatever, the certs are no longer valid, because those are another subdomain, would require another set of wildcard certs (waste of money) or redoing the DNS.
Do NOT PM for help!

Offline Jailer

  • Sr. Member
  • ****
  • Posts: 413
  • Karma: +54/-2
    • View Profile
    • Bored Guy Blog
Re: No way to download pfsense
« Reply #13 on: September 21, 2015, 12:34:03 pm »
Yeah, there's no problem with certs where they are used. When people switch HTTP links to HTTPS on download mirrors or whatever, the certs are no longer valid, because those are another subdomain, would require another set of wildcard certs (waste of money) or redoing the DNS.

Exactly. User error, not pfsense error.

Offline 2chemlud

  • Sr. Member
  • ****
  • Posts: 385
  • Karma: +20/-5
    • View Profile
Re: No way to download pfsense
« Reply #14 on: September 22, 2015, 01:37:31 am »
May I repeat that it hasn't been a problem in the past to download via https. Why is it explicitly forbidden now to use https for downloading?