Bing doesn't support SSL

#1

Post by rljy » Fri, Apr 19, 2013, 11:38 AM UTC

Bing doesn't support SSL
bing.com

Re: Bing doesn't support SSL

#2

Post by casca » Fri, Apr 19, 2013, 12:18 PM UTC

TL;DR: bing SSL certificate is wrong.

https://bing.com: subject=/CN=*.bing.com

https://www.bing.com: subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

Re: Bing doesn't support SSL

#3

Post by Ricapar » Fri, Apr 19, 2013, 12:18 PM UTC

Looks like someone pushed the wrong SSL cert to production:

  www.bing.com uses an invalid security certificate.
  
  The certificate is only valid for the following names:
    a248.e.akamai.net , *.akamaihd.net , *.akamaihd-staging.net  

  (Error code: ssl_error_bad_cert_domain)

Re: Bing doesn't support SSL

#4

Post by timthelion » Fri, Apr 19, 2013, 12:22 PM UTC

Ricapar wrote: post #3

Looks like someone pushed the wrong SSL cert to production: www.bing.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net , *.akamaihd.net , *.akamaihd-staging.net (Error code: ssl_error_bad_cert_domain)

http://revealingerrors.com/akamai_ssl

Re: Bing doesn't support SSL

#5

Post by nopal » Fri, Apr 19, 2013, 12:24 PM UTC

I made a site that checked for SSL cert expirations and misconfigurations, but I couldn't acquire any customers. I still think there's a business there somewhere, although maybe it really only sells as part of another product.

Edit: If anyone wants a script to check their certificates, here you go: https://gist.github.com/bretwalker/5420652. You'll just need to add in some sort of notification logic, especially for expirations, since they need to happen before a problem arises.

Re: Bing doesn't support SSL

#6

Post by aaronsnoswell » Fri, Apr 19, 2013, 12:34 PM UTC

The real question is, why were you on bing? :P

Re: Bing doesn't support SSL

#7

Post by atc » Fri, Apr 19, 2013, 12:35 PM UTC

ssllabs.com

Re: Bing doesn't support SSL

#8

Post by taylorbuley » Fri, Apr 19, 2013, 12:36 PM UTC

This is the second major flub this year. Azure's cert expired in prod not many weeks ago.

Re: Bing doesn't support SSL

#9

Post by ThisIsADogHello » Fri, Apr 19, 2013, 12:37 PM UTC

casca wrote: post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

Don't forget the X09v3 alternate subject names.

https://bing.com/

Subject: CN=* .bing.com

X509v3 Subject Alternative Name: DNS:ieonline.microsoft.com, DNS:* .bing.com, DNS:* .windowssearch.com

--

https://www.bing.com/

Subject: C=US, O=Akamai Technologies, Inc., CN=a248.e.akamai.net

X509v3 Subject Alternative Name: DNS:a248.e.akamai.net, DNS:* .akamaihd.net, DNS:* .akamaihd-staging.net

Re: Bing doesn't support SSL

#10

Post by mrspeaker » Fri, Apr 19, 2013, 12:37 PM UTC

casca wrote: post #2

TL;DR: bing SSL certificate is wrong. https://bing.com : subject=/CN=*.bing.com https://www.bing.com : subject=/C=US/O=Akamai Technologies, Inc./CN=a248.e.akamai.net

Wow, that's the first time I've ever seen a 0-word article get the TL;DR treatment.