nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to connect to bitbucket.org website

dryriver

Hi all

I'm trying to go to bitbucket.org via Firefox and Chrome and neither allow me to reach the website. This prevents me logging in to see my repos in a browser and I cannot sign into SourceTree as the registration option for BitBucket Cloud tries to get you to sign in via a browser window.

It appears to be a problem with the site's certificate. I've noticed it happening for the last 2 weeks. Previously it worked successfully.

Firefox reports:

"bitbucket.org has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

The issue is most likely with the web site, and there is nothing you can do to resolve it."

"Web sites prove their identity via certificates. Firefox does not trust bitbucket.org because its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates."

Google Chrome reports:

"Your connection is not private
Attackers might be trying to steal your information from bitbucket.org (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID"

I'm on a Mac, running macOS High Sierra (10.13.6). Firefox v72.01 and Google Chrome v77.0.3865.90.

Any help appreciated.

Thanks

Andre

Accepted answers

dryriver

Thank you all for taking the time to suggest answers.

The issue I've been experiencing is happening at work so I think that is playing a role. I have tested access from home on other machines and I am able to access the site. This was using Firefox and Google Chrome on Mac OS and Firefox on Linux (Fedora 31 and Ubuntu 18.04), without having to make any settings changes.

So there is some difference with connecting from the office, which I can understand, even though it had worked previously.

The issue appears to be linked to the site's security certificate.

In the office the certificate is shown by Firefox and Chrome as being issued by Open DNS and the "Cisco Umbrella Root CA" is not trusted, therefore the certficate is not valid.

At home, the browsers all show the certificate issued by DigiCert and therefore trusted - allowing access to the site.

I will settle for not being able to access the site from work, but I thought the certificate issue was worth raising in case it is an issue for others or the website administrators.

Regards, Andre

All comments

Jack Nolddor [Sweet Bananas]

I can log in bitbucket.org using Firefox.

Please do you mind to double-check if your computer clock working? Sometimes websites get crazy when the computer's clock is incorrectly set.

Are you able to visit other websites?

Regards

bandidoirlandes

I have been having problems getting to a website here as well. I tracked it down

to a script problem I believe the errors I am getting in web console is

TypeError: localStorage is null

you might check your about:config settings and see

what dom.storage.enabled is setto

when i switch the value to true restart the browser the website loads properly.

Tyler T

It sounds like you may have tried to visit the website using http rather than https.

Be sure to use https when accessing the Bitbucket website: https://bitbucket.org/

dryriver

Hi Tyler, thanks for your response. I was using https as the response from Firefox states that the site only accepts https:

"bitbucket.org has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely."

Please see my answer below for my further troubleshooting.

Thanks again.

dryriver

Thank you all for taking the time to suggest answers.

So there is some difference with connecting from the office, which I can understand, even though it had worked previously.

The issue appears to be linked to the site's security certificate.

In the office the certificate is shown by Firefox and Chrome as being issued by Open DNS and the "Cisco Umbrella Root CA" is not trusted, therefore the certficate is not valid.

At home, the browsers all show the certificate issued by DigiCert and therefore trusted - allowing access to the site.

I will settle for not being able to access the site from work, but I thought the certificate issue was worth raising in case it is an issue for others or the website administrators.

Regards, Andre

Charles_Beckwith

I'm experiencing the same issue on a self-hosted Jira installation running on a Debian/Plesk server with a Let's Encrypt certificate. I can access Jira with Safari, and it shows as secure, but not with Chrome. I get a "Your connection is not private" error and cannot work around it for some reason.

Einar Coutin

Tell your network Administrator and Enterprise security group to Configure the bitbucket.org website and all its subdomains (including AWS cloudfront because you'll need it to download the bitbucket docker image if you're on linux) to be in the Allow List of your Open DNS server.
Your company is using Open DNS, a DNS security system in your work network to protect devices there. The Commercial name of Open DNS is Cisco Umbrella as they were relatively recently acquired so the enterprise version your company must be using is Cisco Umbrella, they have to configure it to play nice with bitbucket because I seriously doubt that the Cisco Umbrella Certificate is not signed with a valid public CA that is already pre-installed on your work machine, like your browser is reporting.

What you're seeing is not the issue, but the symptom of it. I'm sure your networking team or security team, whoever is in charge of DNS on your network has run into users reporting this issue before, reach out to them and ask for help.

Best to you!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud

atl-gruland