EVE Search - Announcement:EVE Launcher

All Channels

EVE Launcher

Announcement:EVE Launcher - Feedback and issues

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Author	Thread Statistics \| Show CCP posts - 106 post(s)

CCP Bugartist C C P C C P Alliance 28	Posted - 2016.03.01 11:13:06 - [1] - Quote Hey everybody! Regarding those "pesky " certificate errors some of you receive. (see here for an example: https://twitter.com/CCP_Bugartist/status/702450237760217088 https://twitter.com/CCP_Bugartist/status/702450499929444352) The new launcher does a nice job with verifying the certificates of the endpoints it connects to (https://en.wikipedia.org/wiki/Public_key_certificate). If this verification fails for any reason, you will receive a warning message/popup like shown in my tweets above. There can be a lot of reasons why the verification fails. Some of them are: The certificate on the endpoint our launcher tries to connect to, like our CDN (https://en.wikipedia.org/wiki/Content_delivery_network) or the SSO (https://en.wikipedia.org/wiki/Single_sign-on), is expired, invalid or unavailable. Your local certificate store has outdated certificates (https://msdn.microsoft.com/en-us/library/windows/desktop/aa386971(v=vs.85).aspx) for the root CAs (https://en.wikipedia.org/wiki/Certificate_authority). Your internet connection is faulty. That might be Packet Loss or Corruption (https://en.wikipedia.org/wiki/Packet_loss) which causes the secure connection to fail during the handshake (https://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_handshake). Which can result in a verification error. Someone is tampering with your connection, trying to read your communication. Sounds crazy? It isnt. In a lot of company/enterprise networks all incoming and outgoing traffic is inspected for security and data leakage detection/prevention reasons (https://en.wikipedia.org/wiki/Data_loss_prevention_software#Network_DLP_.28a.k.a._data_in_motion_.3CDiM.3E.29). This also includes httpS (encrypted and authenticated connections). This is being done by terminating the secure connection on an endpoint which sits in the companies infrastructure, inspecting the traffic, and establishing a new httpS connection to the actual destination forwarding the traffic (https://wiki.openrightsgroup.org/wiki/TLS_interception https://en.wikipedia.org/wiki/Man-in-the-middle_attack). This could of course also be done by a potential attacker trying to steal or tamper information/data in your communication. There are more reasons on why you might receive a certificate error from the launcher, but these are the most common ones. This is why the launcher allows you to ignore the error and continue. But, you should only click this ignore button if you know what you do and if you understand the risk. What can potentially go wrong? Well, if you communication with our endpoints/servers is not secured and properly authenticated, a potential attacker can steal your username and password in order to compromise your EVE accounts. Or, someone could inject his own files into an update the launcher downloads and thereby install a backdoor/malware on your computer. So, what should you do when you receive this certificate error? Make sure you have a secure connection to the internet and try again. That is, if you are connected via an open, unencrypted wifi or, if you are using a shared wifi or wired connection even if it is encrypted, the risk of someone trying to tamper with your connection is a lot higher. If you are connection from a business/company network and you receive this error, go talk to your admins and/or security team. If it happens while you are on your own, private and not shared internet connection from home, please open a support ticket and let us know about this issue. I hope this post will help a bit to understand where the certificate errors can come from and what you can do about it. Thanks and fly safe, CCP Bugartist

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.