Opera 12.17 no longer works with https for me

A Former User

Hello,

I have read this thread, but not sure if there was a fix that was good for all sites with the https security issue. If so anyone care to elaborate.? Please no suggestions about upgrading to new opera. Thanks.

rseiler

rseiler

@stng, no I forgot again that you could do that. I would try it and test it out against sites that would cause Opera to buckle the CPU with OCSP enabled, but there's no call presently to have to fool with OCSP. It would have probably shown the same issue though.

@laingman, the only remaining issue that I know of is "fatal error (80) from server" from certain sites employing Cloudflare's services in a certain way, but there's no way to deal with it in Opera. Fortunately, I don't hit those sites often at all.

A Former User

Actually, I have seen both fatal error 80 and 40 for the same website. Another weird thing that I have seen once or twice is opera not recognizing links, sprint.com for example

rseiler

rseiler

Have you seen 40 lately? I think sites that would show 40 before now show 80, though maybe it depends on the Cloudflare implementation as to what # you get. Either way, it's the same bad news.

A Former User

Have you seen 40 lately? I think sites that would show 40 before now show 80, though maybe it depends on the Cloudflare implementation as to what # you get. Either way, it's the same bad news.

Yeah, saw 40 recently but 80 was first. Maybe because I started playing with the settings

A Former User

So what is the problem exactly. The security the websites are using is too old or too new?

A Former User

I have the Secure connection: fatal error (40) error message on https://addons.opera.com/addons/extensions/
That’s very annoying to not being able to install/update extensions… I don’t know any alternative.

I only have this error in my company (which firewall replaces each SSL certificate names by its own!)

rseiler

rseiler

I don't know why your company is doing that (or even how it's doing that), but maybe try using a VPN to visit that site. Or, if it's a laptop, take it home.

A Former User

There is not much I can do as when I’m home with this laptop, I can’t access anything (I mean, NO network) besides the company VPN through which I can then access the net as from Office (I mean, crippled, or even more crippled).
It’s super securited laptop of hell.

Maybe I can copy stuff from %userprofile%\AppData\Local\Opera\Opera\widgets from the home PC where I get extensions updated.
But maybe it’s enough as an off topic here.

A Former User

@mxxxw
The problem web-site hosted by Cloudfire, ins't?
Try to import chr... Opera's root certs to the Opera 12.

Download archive: https://app.box.com/s/5p00vediw04ds7xkxwgg
Close Opera
Extract archive to your Opera's profile folder (don't forget to backup all *.dat files before any manipulations). Replace(rewrite) original *.dat files with files from zip-archive.

This should fix the issue with Cloudfire/SSL !

I did the cert swap. Has no effect on the error 40. But it seems to have a positive effect on stability, not responding etc., I used to have problems with nypost.com and even this forum site.

I wonder how much work it is for opera to throw us another update to fix some security issues. Just to be nice.

A Former User

I have a solution which is good enough, way better than leaving my beloved old opera to open in another browser. I tried the Kproxy method but kproxy does not work on some sites. I will post this in any relevant thread that has to do with incomparability/security issues.

Reguires installation of neptune: http://www.meadco.com/Neptune/About. I edited my right click menu to run a script so that I am now able to open all the sites with error 40 and even the Chase bank site in Internet Explorer Issues: Normally something about error running script and the url does not display in the address bar, just about blank. And I can't figure out how to bookmark page or use auto login. I got this script from one of the old button creator sites.

Here is the script:

Item, View in IE=Go to page, "javascript:(function(){if(location.protocol.match(/^(javascript|about|opera):$/i))return;var l=location.href;var t=(document.getElementsByTagName('title')[0]?document.getElementsByTagName('title')[0].text:l).replace(/</g,'<').replace(/>/g,'>');var w=window.open('','_blank');w.document.documentElement.innerHTML='<head><title>'+t+' - using Internet Explorer rendering</title><style type=\x22text/css\x22>body{margin:0;padding:0;overflow:hidden;}embed{border:none;}</style></head><body><embed type=\x22application/x-meadco-neptune-ax\x22 width=\x22100%%\x22 height=\x22100%%\x22 param-location=\x22'+l+'\x22></embed></body>'})();",,"View in IE",View

anotheralex

anotheralex

Have you tried to enable(disable) OCSPValidateCertificates for certain web-sites via override.ini ?

I did and it works! Some site stopped working for me last week, throwing an error

'Secure connection: critical error (1066)'

and after adding the following line to a dedicated section in override.ini - I can access that site over https again:

SecurityPrefs|OCSP Validate Certificates=0

A Former User

and after adding the following line to a dedicated section in override.ini - I can access that site over https again:
SecurityPrefs|OCSP Validate Certificates=0

could you hint me: where's the "decicated section"? does it exist in every override.ini??

A Former User

.

A Former User

.

A Former User

.

A Former User

.

A Former User

.

rseiler

rseiler

There's no UI to add that. You have to edit the file yourself and append it to the section that exists for the given site (a section for a given site is automatically created when you make any changes at all to site preferences in the UI.

See my post back on May 27th though for the global setting in opera:config. That's all I use.

A Former User

There's no UI to add that.

i know

append it to the section that exists for the given site

for the given site... But I want to have this section for ALL sites.

See my post back on May 27th though for the global setting in opera:config. That's all I use.

OCSP Validate Certificates: it looks like here, for years -> http://i.imgur.com/SLtUAZB.png