Community
    • Login

    Notepad++ v8.8.3 Release: self-signed certificate

    Scheduled Pinned Locked Moved Announcements
    16 Posts 6 Posters 730 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • PGomersallP
      PGomersall
      last edited by PGomersall

      Looks like none of the crt files will download correctly now; they were working a while ago. It does not download as a valid cert.

      PeterJonesP 1 Reply Last reply Reply Quote 0
      • PeterJonesP
        PeterJones @PGomersall
        last edited by

        @PGomersall said in Notepad++ v8.8.3 Release: self-signed certificate:

        Looks like none of the crt files will download correctly now; they were working a while ago. It does not download as a valid cert.

        Might be something on your end. I just tried all three, and they did what I expected

        • Primary Location: https://notepad-plus-plus.org/nppRoot.crt => downloaded file
        • Secondary Location: https://github.com/notepad-plus-plus/notepad-plus-plus/blob/master/nppRoot.crt => takes you to the GitHub wrapper, where you can download the raw file
        • Tertiary Location: https://npp-user-manual.org/docs/certs/nppRoot.crt => downloaded file
        PGomersallP 1 Reply Last reply Reply Quote 0
        • PGomersallP
          PGomersall @PeterJones
          last edited by PGomersall

          @PeterJones said in Notepad++ v8.8.3 Release: self-signed certificate:

          Might be something on your end. I just tried all three, and they did what I expected

          Tried multiple systems all using MS Edge browser though but also via PowerShell with Invoke-WebRequest, all are returning a plain txt.

          Approximately 1 hour ago it did download correctly.

          Just tried 4 computer and Chrome and FDM - same result

          npp-cert-error.png

          PeterJonesP 1 Reply Last reply Reply Quote 0
          • PeterJonesP
            PeterJones @PGomersall
            last edited by

            @PGomersall said in Notepad++ v8.8.3 Release: self-signed certificate:

            Tried multiple systems all using MS Edge browser though but also via PowerShell with Invoke-WebRequest, all are returning a plain txt.

            My post from 20 minutes ago was after I verified in Chrome. And I just now tried PowerShell

            PS C:\Users\pryrt> cd Downloads                                                                                                                                                     PS C:\Users\pryrt\Downloads>  Invoke-WebRequest https://notepad-plus-plus.org/nppRoot.crt
            
            
            StatusCode        : 200
            StatusDescription : OK
            Content           : {45, 45, 45, 45...}
            RawContent        : HTTP/1.1 200 OK
                                Connection: keep-alive
                                platform: hostinger
                                panel: hpanel
                                content-security-policy: upgrade-insecure-requests
                                alt-svc: h3=":443"; ma=86400
                                x-hcdn-request-id: a5305815b661c200e85fa1...
            Headers           : {[Connection, keep-alive], [platform, hostinger], [panel, hpanel], [content-security-policy, upgrade-insecure-requests]...}
            RawContentLength  : 6380
            
            
            
            PS C:\Users\pryrt\Downloads> Invoke-WebRequest https://npp-user-manual.org/docs/certs/nppRoot.crt
            
            
            StatusCode        : 200
            StatusDescription : OK
            Content           : {45, 45, 45, 45...}
            RawContent        : HTTP/1.1 200 OK
                                Connection: Keep-Alive
                                Keep-Alive: timeout=5, max=100
                                platform: hostinger
                                panel: hpanel
                                content-security-policy: upgrade-insecure-requests
                                alt-svc: h3=":443"; ma=2592000, h3-29="...
            Headers           : {[Connection, Keep-Alive], [Keep-Alive, timeout=5, max=100], [platform, hostinger], [panel, hpanel]...}
            RawContentLength  : 6380
            

            It’s still working for me.

            Approximately 1 hour ago it did download correctly.

            And it’s still downloading correctly now, for me.

            Out of curiousity, I ssh’d into a remote linux machine (which would use a different route/path between that machine and the upstream servers) – and both of those had errors. So there might be a routing issue between some providers and the various notepad++ servers.

            yeah, I tried a tracert notepad-plus-plus.org from my PC , and it was able to find a route; but when I did tracert notepad-plus-plus.org from the remote machine, which has a different route to Notepad++, it wasn’t able to find a route.

            So there might be a network issue somewhere between the Notepad++ servers (both are on the same hosting system, I think) and some other networks, but not all (since I still have access from my home internet connection)

            PGomersallP 1 Reply Last reply Reply Quote 0
            • PGomersallP
              PGomersall @PeterJones
              last edited by

              @PeterJones
              I just got https://notepad-plus-plus.org/nppRoot.crt to download correctly, but not the other 2 locations. Really need this to be bomb proof.

              PeterJonesP 1 Reply Last reply Reply Quote 0
              • PeterJonesP
                PeterJones @PGomersall
                last edited by

                @PGomersall said in Notepad++ v8.8.3 Release: self-signed certificate:

                Really need this to be bomb proof.

                The second site is GitHub. And as I said in my earlier message with the URLs, the GitHub URL doesn’t return the raw cert, it returns the GitHub wrapper around the cert; you have to use the GitHub interface to download the raw. If you want a direct URL to the raw file, it’s at https://raw.githubusercontent.com/notepad-plus-plus/notepad-plus-plus/refs/heads/master/nppRoot.crt … but note that GitHub will give it text/plain headers (because inside, a .cer is often a BASE64-encoded file starting with -----BEGIN CERTIFICATE----- and ending with -----END CERTIFICATE-----…

                So, for that matter, the certificates downloaded from the other URLs will be “plain text” as well. The question is what are the contents of that plain text. And you haven’t given any hint as to that.

                Checking the contents you are receiving is really the next step. The hosting service that Don uses for Notepad++ websites often uses the “are you a human” checks to prevent DDOS attacks – so you might actually be getting a “403 Forbidden” error, especially when using the command-line based interfaces instead of a browser. So the contents might be either an error message, or an HTML version of an error message.

                So if there are network/route errors, Don cannot do anything to fix that. If you are being “forbidden” because you haven’t done the “are you a human check”, there’s nothing Don can do to fix that. And if you are going to the non-raw github URL, it will of course be the github-wrapped version.

                1 Reply Last reply Reply Quote 2
                • donhoD
                  donho @donho
                  last edited by donho

                  @PeterJones

                  Sorry if I wasn’t fast enough for the Release Notes…

                  Better late than never (Not sure it exists in English, but the French sentence is “Mieux vaut tard que jamais”).

                  Updated. Please check:
                  https://notepad-plus-plus.org/downloads/v8.8.3/
                  https://notepad-plus-plus.org/news/v883-self-signed-certificate/
                  https://notepad-plus-plus.org/resources/
                  and
                  https://github.com/notepad-plus-plus/notepad-plus-plus/tree/master

                  1 Reply Last reply Reply Quote 4
                  • Jordi SoleJ
                    Jordi Sole
                    last edited by

                    Good Morning

                    I downloaded the latest version of N++ and I installed the certificate npproot.crt.
                    When I try to execute npp.8.8.3.Installer.exe it appears the following screen

                    7cb71d16-5ed8-4900-a22b-e0844c897816-image.png

                    With npp.8.8.2.Installer.exe it’s ok.

                    Any suggestion?

                    xomxX 1 Reply Last reply Reply Quote 0
                    • xomxX
                      xomx @Jordi Sole
                      last edited by

                      @Jordi-Sole said in Notepad++ v8.8.3 Release: self-signed certificate:

                      Any suggestion?

                      Just wait for a while, the AVs need some time to handle (update its info) the new Notepad++ self-signed certificate.

                      I just tried the VirusTotal and ok (much much better from what we saw at the unsigned v8.8.2 release time - only 1 AV from 72 flagged the npp.8.8.3.Installer.x64.exe as malware):

                      https://www.virustotal.com/gui/file/7094a07167648628e47249a16d9d6db922e5aa1255ac4322a2e4900d233372dd

                      1 Reply Last reply Reply Quote 2
                      • S
                        sevem47
                        last edited by

                        For me it seems, that the information for the root certificate in the user manual got somehow mixed up a little bit.
                        Thumbprint value is taken of the current root certificate, whereas value of the serial number is of the previous certificate.

                        PeterJonesP 1 Reply Last reply Reply Quote 1
                        • PeterJonesP
                          PeterJones @sevem47
                          last edited by

                          @sevem47 said in Notepad++ v8.8.3 Release: self-signed certificate:

                          Thumbprint value is taken of the current root certificate, whereas value of the serial number is of the previous certificate.

                          Both values match what was published in this post and this page

                          S xomxX 2 Replies Last reply Reply Quote 0
                          • S
                            sevem47 @PeterJones
                            last edited by

                            @PeterJones
                            This I have seen, but unfortunately this does not match with the current root certificate that can be downloaded:

                            9cae0c79-3ee5-4a24-b8f8-a29fd5ff9b27-image.png

                            f0542ad5-63c0-46c3-94d0-ea3b87bbf8de-image.png

                            donhoD 1 Reply Last reply Reply Quote 1
                            • xomxX
                              xomx @PeterJones
                              last edited by

                              @PeterJones

                              I also see for the current nppRoot.crt:

                              Serial number: 63a633d265f1ffed66c5c67cbd9b7189
                              Thumbprint: c80539ff7076d22e73a01f164108dafbf06e45e4

                              1 Reply Last reply Reply Quote 0
                              • donhoD
                                donho @sevem47
                                last edited by donho

                                @sevem47 said in Notepad++ v8.8.3 Release: self-signed certificate:

                                @PeterJones
                                This I have seen, but unfortunately this does not match with the current root certificate that can be downloaded:

                                It should be 63a633d265f1ffed66c5c67cbd9b7189
                                Fixed in https://notepad-plus-plus.org/resources/

                                PeterJonesP 1 Reply Last reply Reply Quote 1
                                • PeterJonesP
                                  PeterJones @donho
                                  last edited by

                                  fixed usermanual

                                  1 Reply Last reply Reply Quote 1
                                  • First post
                                    Last post
                                  The Community of users of the Notepad++ text editor.
                                  Powered by NodeBB | Contributors