Setup.roblox.com has an invalid certificate

Bug Reports Website Bugs
#1

When navigating to https://setup.roblox.com/version.txt, it is returning an invalid certificate error instead of showing the version string.

image
image1018×403 22.2 KB

image
image976×116 13.4 KB

This happens across the entire endpoint, not just version.txt

Here are what happens with the different setup endpoints
https://setup.rbxcdn.com - OK, returns no error
https://setup.roblox.com - Privacy Error (Invalid Certificate)
https://setup.sitetest1.robloxlabs.com - Privacy Error (Invalid Certificate)
https://setup.sitetest2.robloxlabs.com - Privacy Error (Invalid Certificate)
https://setup.sitetest3.robloxlabs.com - Privacy Error (Invalid Certificate)

Weirdly, if you navigate to these pages with HTTP, the error is dismissed, meaning most likely that the certificate was not set up correctly for the subdomain.

Mandatory Browser Information:

  • User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
  • Platform Type: PC
  • Device Type: Computer
4 Likes
#2

Hey FilteredDev,

You’re talking directly to the Amazon S3 bucket that contains setup files when you go to setup.roblox.com. Amazon doesn’t support SSL communication with vanity domain name buckets like this. We don’t use those domains anymore (and will likely lock down access to it at some point). You should use setup.rbxcdn.com for accessing that bucket instead.

In fact, if what you are looking for is just current version information, you should use the ClientSettings API for checking this instead (as /version.txt may not be around forever either). https://clientsettingscdn.roblox.com/v1/client-version/WindowsPlayer will get you the current version number, guid and boostrapper version.

HTH

2 Likes