View Issue Details

IDProjectCategoryView StatusLast Update
0000994Main CAcert Websiteweb of trustpublic2013-01-20 12:06
ReporterUli60 Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Summary0000994: cats.cacert.org SSL failure
Description>To connect to the assure challenge you need a valid CAcert client
>certificate installed in your browser. To see if you are able to
>install a Client certificate ia actually the first test of the challenge.

How clever... and discouraging. I was following the links presented to me in order to learn more, so I went to the Training page, hoping to learn about training. The mostly-empty page included this message:

"You have at least 100 Assurance Points, if you want to become an assurer try the Assurer Challenge!"

Wanting to learn more about the Assurer Challenge, I clicked on that link. You have fooled me, I'm now in the challenge without even knowing it! I am NOT amused. A link to http://wiki.cacert.org/AssurerChallenge would have been MUCH more helpful. I am now treading carefully through that document.
Steps To ReproduceI logged on to www.cacert.org via Password, and arrived at
https://www.cacert.org/account.php

I clicked the "CAcert Web of Trust" menu item, which included a link saying "Training" and arrived at
https://www.cacert.org/account.php?id=55

That page included this message:
You have at least 100 Assurance Points, if you want to become an assurer try the Assurer Challenge!

The words "Assurer Challenge" were a link to https://cats.cacert.org/
As you probably know, that site requires a Client Certificate in order to establish the necessary SSL connection. My suggestion is that this link go to the Wiki page http://wiki.cacert.org/AssurerChallenge

Similarly, the "CAcert Web of Trust" menu item which says "Assure Someone" goes to
https://www.cacert.org/wot.php?id=5
This page also has a link saying "Assurer Challenge" which goes to https://cats.cacert.org/ so it is also unusable without a Client Certificate. Again, I think this should be a link to the Wiki.

Thank you for looking into this!

(reported by Win)
Additional Informationhttps://lists.cacert.org/wws/arc/cacert-support/2011-11/msg00067.html
https://lists.cacert.org/wws/arc/cacert-support/2011-11/msg00071.html
https://lists.cacert.org/wws/arc/cacert-support/2011-11/msg00073.html
https://lists.cacert.org/wws/arc/cacert-support/2011-11/msg00076.html
https://lists.cacert.org/wws/arc/cacert-support/2011-11/msg00079.html
TagsNo tags attached.
Reviewed by
Test Instructions

Relationships

related to 0001107 new CATS.cacert.org CACert CATS Manual has only one page, which is mostly empty 
related to 0001016 new Main CAcert Website There is no information that certificate signed by CAcert is required to login into CATS 

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2011-11-28 23:28 Uli60 New Issue
2011-11-28 23:35 Uli60 Additional Information Updated
2012-12-27 17:10 Werner Dworak Relationship added related to 0001107
2013-01-20 12:06 INOPIAE Relationship added related to 0001016