Anybody else getting an invalid SSL certificate with the new update?

[Parz]

Won't let me get past the main menu giving me this error: Invalid SSL Certificate

"the security of the root CA certificate could not be verified"

I was literally just playing yesterday and now I can't get into the game. I've tried verifying integrity of the game and uninstalling and reinstalling and I still get this error.

[Vage]

Nope, please check that your windows day. year and time are updated.

[Parz]

Originally posted by Vage:

Nope, please check that your windows day. year and time are updated.

Yes it is the correct date and time

[chin]

I'm having this issue too

[Parz]

this is the response I got from my support ticket, I will let you know if it works


For this case, could you please try restarting your computer and Steam client to see if this issue persists? If it does, please follow these steps that may help to resolve this:

1. Press Windows Key + R to bring up "Run"
2. Type "cmd" (without quotes) and hit enter to bring up "Command Prompt"
3. First, type "ipconfig /release" (without quotes) and hit enter.
4. Second, type "ipconfig /renew" (without quotes) and hit enter
5. Lastly, type "ipconfig /flushdns" (without quotes) and hit enter
6. We also advise repairing/reinstalling EAC
7. Restart your computer

[Parz]

Originally posted by Daddy Ace:

this is the response I got from my support ticket, I will let you know if it works


For this case, could you please try restarting your computer and Steam client to see if this issue persists? If it does, please follow these steps that may help to resolve this:

1. Press Windows Key + R to bring up "Run"
2. Type "cmd" (without quotes) and hit enter to bring up "Command Prompt"
3. First, type "ipconfig /release" (without quotes) and hit enter.
4. Second, type "ipconfig /renew" (without quotes) and hit enter
5. Lastly, type "ipconfig /flushdns" (without quotes) and hit enter
6. We also advise repairing/reinstalling EAC
7. Restart your computer

This did not work, still getting the error

[Q-Cat]

@daddy ace - We had the same error come up in the last PTB, and assumed it was just BHVR screwing something up as usual, but it's back now that those changes have been pushed to production.

Pure speculation: I suspect that they've changed something in the way they handle network connections to ensure the connections can't be spoofed. SSL Packet Inspection by any mature firewall serves as a MITM for SSL. If they're looking for "their" SSL cert and they get the firewall cert instead, it could cause this error.

(In other words, if you're on a security-conscious network, you're going to have to drop your pants to play the game.)

[Parz]

Originally posted by Q-Cat:

@daddy ace - We had the same error come up in the last PTB, and assumed it was just BHVR screwing something up as usual, but it's back now that those changes have been pushed to production.

Pure speculation: I suspect that they've changed something in the way they handle network connections to ensure the connections can't be spoofed. SSL Packet Inspection by any mature firewall serves as a MITM for SSL. If they're looking for "their" SSL cert and they get the firewall cert instead, it could cause this error.

(In other words, if you're on a security-conscious network, you're going to have to drop your pants to play the game.)

I have the game pushing through my firewall already so if that's the problem it should have solved it? What else would I need to do?

Also if they found this problem on the PTB... why would they push it to live without fixing it?

[Q-Cat]

Originally posted by Daddy Ace:

Originally posted by Q-Cat:

...

I have the game pushing through my firewall already so if that's the problem it should have solved it? What else would I need to do?

Also if they found this problem on the PTB... why would they push it to live without fixing it?

I'm looking at the network traffic now. If you can get traffic traces, might be worth looking.

At this point, I'm seeing blocked traffic to "steam.live.bhvrdbd.com/" and am trying to whitelist it.

As to why they'd push a problem found on the PTB to production, I have two likely reasons:

1. It affected a small subset of people, so BHVR doesn't really care.
2. BHVR pushes things into production all the time that are bug-ridden. This would hardly be the first or most shocking.

[Q-Cat]

Fixed it on my end. Whitelisting steam.live.bhvrdbd.com (allowing it to bypass categorization as an unknown domain) and permitting it for web traffic seems to have solved the problem.

[Parz]

Originally posted by Q-Cat:

Fixed it on my end. Whitelisting steam.live.bhvrdbd.com (allowing it to bypass categorization as an unknown domain) and permitting it for web traffic seems to have solved the problem.

Sadly I am on my universities internet so I cannot white list it. I will have to wait until Behavior fixes it on their end.

[chin]

Originally posted by Daddy Ace:

Originally posted by Q-Cat:

Fixed it on my end. Whitelisting steam.live.bhvrdbd.com (allowing it to bypass categorization as an unknown domain) and permitting it for web traffic seems to have solved the problem.

Sadly I am on my universities internet so I cannot white list it. I will have to wait until Behavior fixes it on their end.

Ahh That explains it. I'm on a university network as well.

[Q-Cat]

So, if I'm correct, then the issue is not actually a bad CA or SSL certificate, it's that the ability to communicate with that particular domain (which is probably what BHVR is using to validate the certificate) is blocked.

I've submitted feedback to my firewall vendor (Fortinet) to have this domain scanned and recategorized, which will fix the problem eventually if your universities use their equipment. I don't know what the turnaround time for that would be, and if they're using a different firewall vendor, that will probably require a separate report from a customer.

I will post something to this effect into the BHVR DBD forums as well to see if BHVR can be moved to push the changes on their end to various firewall vendors.

[Q-Cat]

It's been categorized. It will take a bit to propogate, and again this is only for Fortinet FortiGuard (other firewalls may not reflect the change) but try in a day or two, it might just clear up by itself.

[Parz]

They might have rolled it out with the new Tome but it seems fixed on my end. going to steam.live.bhvrdbd.com now gives me a 404 error so it seems that they fixed this. How is it for everyone else?

[Q-Cat]

Daddy Ace, are you still unable to get to the game? Is the error the same in-game?