Security error when accessing atlassian.net and my company's jira subdomain

[Andrey Tsobenko]

The issue is basically the same as this one, with the same Chromium error and curl output

[Andrey Tsobenko]

*WRONG THREAD, TO DELETE*

[Andy Heinzer]

Hi Andrey,

Sorry to hear about this problem.  Could you please let us know some more information about this problem?  Such as your:

• Version of Chromium
• Exact URL being curled
• curl results

With this information we can investigate further here.

Thanks

Andy

[Andrey Tsobenko]

Chromium 75.0.3770.100 64bit on Arch Linux

curl https://atlassian.net -vvv
* Trying 18.184.99.130:443...
* TCP_NODELAY set
* Connected to atlassian.net (18.184.99.130) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
* subject: C=US; ST=California; L=San Francisco; O=Atlassian Network Services, Inc.; CN=*.atlassian.net
* start date: Oct 6 00:00:00 2017 GMT
* expire date: Dec 20 12:00:00 2019 GMT
* subjectAltName: host "atlassian.net" matched cert's "atlassian.net"
* issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 High Assurance Server CA
* SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5633e96b9f30)
> GET / HTTP/2
> Host: atlassian.net
> User-Agent: curl/7.65.1
> Accept: */*
> 
* Connection state changed (MAX_CONCURRENT_STREAMS == 200)!
* HTTP/2 stream 0 was not closed cleanly: STREAM_CLOSED (err 5)
* stopped the pause stream!
* Connection #0 to host atlassian.net left intact
curl: (92) HTTP/2 stream 0 was not closed cleanly: STREAM_CLOSED (err 5) 

[Andy Heinzer]

Hi Andrey,

Perhaps I have misunderstood the problem here.  In the thread you referenced in https://community.atlassian.com/t5/Bitbucket-questions/myteam-bitbucket-io-page-security-error/qaq-p/851109

The user test was to curl https://qtandroidwidgets.bitbucket.io/

In that specific example there appears to have been a problem with a legit domain name having it's requests being blocked.  The solution was implemented on Atlassian's side in that case to remove this block.

However in your case, you have just provided the domain atlassian.net, which by itself (without a subdomain) does not actually host any pages and instead just redirects to the atlassian.com domain.

I am interested to learn the specific bitbucket Cloud URL AND/OR Atlassian Cloud URL you are seeing this problem on.  Only with this information can we investigate this specific problem further.

Thanks,

Andy

[Andrey Tsobenko]

The specific domain is https://intersog.atlassian.net

[Nicolas Meessen]

Andrey can you try hitting https://intersog.atlassian.net/_edge/export-control-test/ and share the result?

What's the source IP range you get from your ISP?