ERR_CERT_AUTHORITY_INVALID on res.cloudinary.com

jfahrni_lob
jfahrni_lob Member Posts: 2 ✭
in General

Hello together

Since last Friday, there have been an increasing number of reports from customers that the images from Cloudinary are no longer displayed in our Webshop (www.gela.ch)

The problem occurs with several customers independently. When trying to load an image via res.cloudinary.com a certificate error is displayed in Firefox (ERR_CERT_AUTHORITY_INVALID)

It is possible that access is being intercepted by security software. However, it is very strange that several independent customers are reporting the problem almost simultaneously!

Any Ideas here?

Answers

  • SreeCloudinary
    SreeCloudinary Member, Cloudinary Staff Posts: 45

    Hi @jfahrni_lob ,

    Thanks for contacting Cloudinary.

    I am unable to reproduce the issue at our end.

    The certificate used on res.cloudinary.com is issued by Go Daddy Secure Certificate Authority - G2 (  ) and should be acceptable to all modern browsers and tools.

    If the user is seeing an invalid certificate error, the most likely explanations are that they don't have the necessary root certificates installed on their system or browser (in which case they or their IT team can obtain the necessary certificates above), or that their requests to res.cloudinary.com are being intercepted by a firewall, security system, etc, and that firewall or security system is returning a certificate which is rejected for a similar reason.

    Unless the user's device date and time are very wrong, or their browser is very old or running on an old operating system which hasn't been kept up to date with security patches (and I hope none of those are likely), the most likely explanation is that there's a firewall or network security device intercepting the requests and that the user's computer doesn't have the certificates used by that firewall installed - if so, the vendor of that system or their IT team should be able to assist.

    If you don't think any of what I said above is the problem, please try to verify what certificate they're receiving (their browser may show this and allow the certificate to be exported) or see if they can provide some debug information such as by making a request from a command line tool like 'curl' and storing the output.

    For example, here's an example curl request that you can make related to cloudinary or your website:

    curl --http2 -vvv -I "https://res.cloudinary.com/demo/sample.jpg"

    Thanks,

    Sree

  • jfahrni_lob
    jfahrni_lob Member Posts: 2 ✭

    Hi all,
    I'm pretty sure that the problem is a firewall or other security software. The question is more why are several of these systems suddenly kicking in and blocking res.cloudinary.com?

  • Tom
    Tom Member, Cloudinary Staff Posts: 113

    Hi @jfahrni_lob ,

    Thanks for replying.

    I see you have opened a direct support ticket with us so let's continue using that going forward.

    Kind Regards,

    Thomas

Categories