[RESOLVED] URGENT : SITE SECURITY INVALID

Post a reply

Confirmation code
Enter the code exactly as it appears. All letters are case insensitive.
Smilies
:points: :-D :eyeroll: :neutral: :nmr: :razz: :raging: :-) ;) :( :sick: :o :? 8-) :x :shock: :lol: :cry: :evil: :?: :smirk: :!:
View more smilies
BBCode is ON
[img] is ON
[flash] is OFF
[url] is OFF
Smilies are ON
Topic review
   

If you wish to attach one or more files enter the details below.

Expand view Topic review: [RESOLVED] URGENT : SITE SECURITY INVALID

Re: URGENT : SITE SECURITY INVALID

by jmo1121109 » Sat May 26, 2018 3:33 pm

JECE wrote: ↑
Sat May 26, 2018 3:07 pm
 You can combine user's cookies from two different websites? How would that work if the browser thinks that www and non-www are two different websites?
Something like this: https://stackoverflow.com/questions/184 ... and-domain

Re: URGENT : SITE SECURITY INVALID

by JECE » Sat May 26, 2018 3:20 pm

flash2015:
flash2015 wrote: ↑
Fri May 25, 2018 3:27 pm
 When was SSL added? I think I asked about this a couple of months ago and was told it was not a priority.
It was in February. See the announcement thread:
https://webdiplomacy.net/contrib/phpBB3 ... ?f=5&t=325

This seems to be the discussion that sparked kestasjk's interest:
https://webdiplomacy.net/contrib/phpBB3 ... f=17&t=106

Re: URGENT : SITE SECURITY INVALID

by JECE » Sat May 26, 2018 3:07 pm

You can combine user's cookies from two different websites? How would that work if the browser thinks that www and non-www are two different websites?

Re: URGENT : SITE SECURITY INVALID

by ghug » Sat May 26, 2018 2:38 am

It's weird that they don't just redirect though. Look at what happens on most sites when you type the URL with/without the www.

Re: URGENT : SITE SECURITY INVALID

by jmo1121109 » Fri May 25, 2018 8:11 pm

ghug wrote: ↑
Fri May 25, 2018 5:50 pm
 I might take a look at that this weekend if I get some time. We also need to redirect www and non-www to the same place at some point.
There's a github issue to correct the cookie so that it works for both www and non www, it's technically a bug that it doesn't.

Re: URGENT : SITE SECURITY INVALID

by ghug » Fri May 25, 2018 5:50 pm

I might take a look at that this weekend if I get some time. We also need to redirect www and non-www to the same place at some point.

Re: URGENT : SITE SECURITY INVALID

by flash2015 » Fri May 25, 2018 5:13 pm

Do you plan to add the redirect in apache config (or equivalent in nginx if you are using that) to automatically redirect http to https...or are you letting these changes soak for a while first?

Re: URGENT : SITE SECURITY INVALID

by jmo1121109 » Fri May 25, 2018 4:27 pm

It was not a priority but kestas got bored and then we had it lol

Kestas also provided a way for myself and other admins to fix this issue if it comes up again so thanks for that!

Re: URGENT : SITE SECURITY INVALID

by flash2015 » Fri May 25, 2018 3:27 pm

When was SSL added? I think I asked about this a couple of months ago and was told it was not a priority. Not complaining though. Thanks very much for adding it!

Re: URGENT : SITE SECURITY INVALID

by Jamiet99uk » Fri May 25, 2018 2:35 pm

Great thanks. It does appear fixed.

Re: URGENT : SITE SECURITY INVALID

by bo_sox48 » Fri May 25, 2018 2:07 pm

Lol woops

Thanks kestas

Re: URGENT : SITE SECURITY INVALID

by Tom Bombadil » Fri May 25, 2018 2:03 pm

Multiaccounter. MODS. BAN HIM.

Re: URGENT : SITE SECURITY INVALID

by kestasjk-testing » Fri May 25, 2018 2:01 pm

Sorry folks, this should now be sorted

Re: URGENT : SITE SECURITY INVALID

by ssorenn » Fri May 25, 2018 1:36 pm

I got it too. I cleared all browser history and retyped site into browser to get back

Re: URGENT : SITE SECURITY INVALID

by flash2015 » Fri May 25, 2018 1:18 pm

I didn't know we had https. It looks like the cert expired today:

www.webdiplomacy.net uses an invalid security certificate. The certificate expired on May 25, 2018, 4:15 AM. The current time is May 25, 2018, 9:14 AM.

Re: URGENT : SITE SECURITY INVALID

by Octavious » Fri May 25, 2018 12:56 pm

I get it too. I didn't notice at first as I never bothered to switch from http to https on my phone's browser, but now that I've done so it ain't happy.

Re: URGENT : SITE SECURITY INVALID

by Claesar » Fri May 25, 2018 12:53 pm

You're not the only one. As soon as an admin is available, we'll be on top of this.

Re: URGENT : SITE SECURITY INVALID

by Tom Bombadil » Fri May 25, 2018 12:48 pm

Strange. I am getting no such errors.

Is your computer clock correct? I know that sometimes produces that error if somehow the date is wrong.

[RESOLVED] URGENT : SITE SECURITY INVALID

by Jamiet99uk » Fri May 25, 2018 12:41 pm

I tried to post this in the bug forum but it is not working (also a bug?)

Whenever I access the site I get a warning from my browser (both Samsung internet on my phone, and Chrome) that Webdiplomacy.net has an expired, invalid security certificate and the site is unsafe.

Is this being addressed? Admins?

Top