Sep. 17, 2009, 12:37 PM
I'm using Opera a lot more now. I have version 1010 and I tried to use Opera a few days ago to do a Microsoft survey (I am a long time Windows Feedback Panel member). Opera refused to open the survey page complaining that it had not heard of Verisign as a root authority and that also there was a missing intermediate cert. Fx had no problems opening the page nor did IE 6 and 8. In looking at the Opera certs and comparing to those in Fx 1.5 and Fx3, I noticed that Opera has a number of missing certs both intermediate and root. I imported the needed Versign one from Fx and then everything was fine. But I later tried another page that Opera also refused to open saying the cert issuer was unknown. During both problems, I tried bypassing Proxo and that did not help so I did not think Proxo was the problem.
I posted the problem at dslreports Security forum and then went on a short business trip. I checked the thread a few minutes ago and Bandheight has found the culprit and he asked me to post it here. It's this filter:
[HTTP headers]
In = TRUE
Out = FALSE
Key = "Content-Type: 5a Filter sel. Text Types 9.02.25 [sd] (d.r l.3) (In)"
URL = "^$RESP(204|3)|$TST(hRealCT=*)|$TST(keyword=*.(a_headers|a_type_t|i_level:[12]).*)|$TST(volat=*.post:1.*)|$TST(uExt=exe|gz)"
Match = "text/plain(^*; Prx(^Msg: Fixed acc. to Original))$SET(1=\0)|(^?)($TST(hOrigUA=*msie(^*opera)*)$SET(1=text/plain)|)$SET(2=: No Content-Type)&\0&($TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tHDR_In CT_FilterTrue\t\1\2 \t\u)|)$LOG(CRESP $DTM© : Content-Type: Filter True: \1)"
Replace = "\1; PrxMsg: Filter Text\2$SET(hRealCT=filter)$FILTER(1)"
The thread is here:
http://www.dslreports.com/forum/r2302521...s#23037790
Bandheight says that with this filter on that Opera is unable to update certificates. If the filter is unchecked for several hours, and Opera is left running, then Opera will update the certs. So, I am going to disable the filter just before I go to sleep and leave Opera open and running overnight.
Edit: I should add that Bandheight reports that Opera 9.64 also exhibits this problem. It is not just in Opera 10 (my 1010 for anyone curious is a later version that the official Opera 10 and it has Opera Unite enabled).
I posted the problem at dslreports Security forum and then went on a short business trip. I checked the thread a few minutes ago and Bandheight has found the culprit and he asked me to post it here. It's this filter:
[HTTP headers]
In = TRUE
Out = FALSE
Key = "Content-Type: 5a Filter sel. Text Types 9.02.25 [sd] (d.r l.3) (In)"
URL = "^$RESP(204|3)|$TST(hRealCT=*)|$TST(keyword=*.(a_headers|a_type_t|i_level:[12]).*)|$TST(volat=*.post:1.*)|$TST(uExt=exe|gz)"
Match = "text/plain(^*; Prx(^Msg: Fixed acc. to Original))$SET(1=\0)|(^?)($TST(hOrigUA=*msie(^*opera)*)$SET(1=text/plain)|)$SET(2=: No Content-Type)&\0&($TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tHDR_In CT_FilterTrue\t\1\2 \t\u)|)$LOG(CRESP $DTM© : Content-Type: Filter True: \1)"
Replace = "\1; PrxMsg: Filter Text\2$SET(hRealCT=filter)$FILTER(1)"
The thread is here:
http://www.dslreports.com/forum/r2302521...s#23037790
Bandheight says that with this filter on that Opera is unable to update certificates. If the filter is unchecked for several hours, and Opera is left running, then Opera will update the certs. So, I am going to disable the filter just before I go to sleep and leave Opera open and running overnight.
Edit: I should add that Bandheight reports that Opera 9.64 also exhibits this problem. It is not just in Opera 10 (my 1010 for anyone curious is a later version that the official Opera 10 and it has Opera Unite enabled).