[RESOLVED] URGENT : SITE SECURITY INVALID

Members can make suggestions for improving the site and improving the forum as well as submit bug reports to be reviewed by our support team here.
Post Reply
Message
Author
User avatar
Jamiet99uk
Posts: 29456
Joined: Sat Dec 30, 2017 11:42 pm
Location: Durham, UK
Karma: 18259
Contact:

[RESOLVED] URGENT : SITE SECURITY INVALID

#1 Post by Jamiet99uk » Fri May 25, 2018 12:41 pm

I tried to post this in the bug forum but it is not working (also a bug?)

Whenever I access the site I get a warning from my browser (both Samsung internet on my phone, and Chrome) that Webdiplomacy.net has an expired, invalid security certificate and the site is unsafe.

Is this being addressed? Admins?

Tom Bombadil
Gold Donator
Gold Donator
Posts: 2927
Joined: Tue Oct 03, 2017 1:52 pm
Location: Detroit, MI
Karma: 2524
Contact:

Re: URGENT : SITE SECURITY INVALID

#2 Post by Tom Bombadil » Fri May 25, 2018 12:48 pm

Strange. I am getting no such errors.

Is your computer clock correct? I know that sometimes produces that error if somehow the date is wrong.

Claesar
Posts: 1965
Joined: Tue Oct 03, 2017 10:34 am
Karma: 1490
Contact:

Re: URGENT : SITE SECURITY INVALID

#3 Post by Claesar » Fri May 25, 2018 12:53 pm

You're not the only one. As soon as an admin is available, we'll be on top of this.

Octavious
Posts: 3844
Joined: Fri Sep 29, 2017 4:16 pm
Location: The Five Valleys, Gloucestershire
Karma: 2605
Contact:

Re: URGENT : SITE SECURITY INVALID

#4 Post by Octavious » Fri May 25, 2018 12:56 pm

I get it too. I didn't notice at first as I never bothered to switch from http to https on my phone's browser, but now that I've done so it ain't happy.

User avatar
flash2015
Gold Donator
Gold Donator
Posts: 3200
Joined: Fri Sep 29, 2017 7:55 pm
Location: Planet Earth
Karma: 1155
Contact:

Re: URGENT : SITE SECURITY INVALID

#5 Post by flash2015 » Fri May 25, 2018 1:18 pm

I didn't know we had https. It looks like the cert expired today:

www.webdiplomacy.net uses an invalid security certificate. The certificate expired on May 25, 2018, 4:15 AM. The current time is May 25, 2018, 9:14 AM.

ssorenn
Gold Donator
Gold Donator
Posts: 469
Joined: Thu Oct 19, 2017 4:51 pm
Karma: 109
Contact:

Re: URGENT : SITE SECURITY INVALID

#6 Post by ssorenn » Fri May 25, 2018 1:36 pm

I got it too. I cleared all browser history and retyped site into browser to get back

kestasjk-testing
Posts: 2
Joined: Fri Sep 29, 2017 3:06 pm
Karma: 3
Contact:

Re: URGENT : SITE SECURITY INVALID

#7 Post by kestasjk-testing » Fri May 25, 2018 2:01 pm

Sorry folks, this should now be sorted
3

Tom Bombadil
Gold Donator
Gold Donator
Posts: 2927
Joined: Tue Oct 03, 2017 1:52 pm
Location: Detroit, MI
Karma: 2524
Contact:

Re: URGENT : SITE SECURITY INVALID

#8 Post by Tom Bombadil » Fri May 25, 2018 2:03 pm

Multiaccounter. MODS. BAN HIM.
5

bo_sox48
Site Admin
Site Admin
Posts: 3901
Joined: Thu Jun 08, 2017 1:01 am
Karma: 2785
Contact:

Re: URGENT : SITE SECURITY INVALID

#9 Post by bo_sox48 » Fri May 25, 2018 2:07 pm

Lol woops

Thanks kestas
1

User avatar
Jamiet99uk
Posts: 29456
Joined: Sat Dec 30, 2017 11:42 pm
Location: Durham, UK
Karma: 18259
Contact:

Re: URGENT : SITE SECURITY INVALID

#10 Post by Jamiet99uk » Fri May 25, 2018 2:35 pm

Great thanks. It does appear fixed.

User avatar
flash2015
Gold Donator
Gold Donator
Posts: 3200
Joined: Fri Sep 29, 2017 7:55 pm
Location: Planet Earth
Karma: 1155
Contact:

Re: URGENT : SITE SECURITY INVALID

#11 Post by flash2015 » Fri May 25, 2018 3:27 pm

When was SSL added? I think I asked about this a couple of months ago and was told it was not a priority. Not complaining though. Thanks very much for adding it!

jmo1121109
Lifetime Site Contributor
Posts: 1099
Joined: Fri Sep 29, 2017 4:20 pm
Karma: 2944
Contact:

Re: URGENT : SITE SECURITY INVALID

#12 Post by jmo1121109 » Fri May 25, 2018 4:27 pm

It was not a priority but kestas got bored and then we had it lol

Kestas also provided a way for myself and other admins to fix this issue if it comes up again so thanks for that!
1

User avatar
flash2015
Gold Donator
Gold Donator
Posts: 3200
Joined: Fri Sep 29, 2017 7:55 pm
Location: Planet Earth
Karma: 1155
Contact:

Re: URGENT : SITE SECURITY INVALID

#13 Post by flash2015 » Fri May 25, 2018 5:13 pm

Do you plan to add the redirect in apache config (or equivalent in nginx if you are using that) to automatically redirect http to https...or are you letting these changes soak for a while first?

User avatar
ghug
Bronze Donator
Bronze Donator
Posts: 17581
Joined: Mon Mar 20, 2017 3:51 pm
Location: Seattle
Karma: 11400
Contact:

Re: URGENT : SITE SECURITY INVALID

#14 Post by ghug » Fri May 25, 2018 5:50 pm

I might take a look at that this weekend if I get some time. We also need to redirect www and non-www to the same place at some point.

jmo1121109
Lifetime Site Contributor
Posts: 1099
Joined: Fri Sep 29, 2017 4:20 pm
Karma: 2944
Contact:

Re: URGENT : SITE SECURITY INVALID

#15 Post by jmo1121109 » Fri May 25, 2018 8:11 pm

ghug wrote:
Fri May 25, 2018 5:50 pm
I might take a look at that this weekend if I get some time. We also need to redirect www and non-www to the same place at some point.
There's a github issue to correct the cookie so that it works for both www and non www, it's technically a bug that it doesn't.

User avatar
ghug
Bronze Donator
Bronze Donator
Posts: 17581
Joined: Mon Mar 20, 2017 3:51 pm
Location: Seattle
Karma: 11400
Contact:

Re: URGENT : SITE SECURITY INVALID

#16 Post by ghug » Sat May 26, 2018 2:38 am

It's weird that they don't just redirect though. Look at what happens on most sites when you type the URL with/without the www.

User avatar
JECE
Posts: 1478
Joined: Sun Dec 31, 2017 4:35 pm
Karma: 393
Contact:

Re: URGENT : SITE SECURITY INVALID

#17 Post by JECE » Sat May 26, 2018 3:07 pm

You can combine user's cookies from two different websites? How would that work if the browser thinks that www and non-www are two different websites?

User avatar
JECE
Posts: 1478
Joined: Sun Dec 31, 2017 4:35 pm
Karma: 393
Contact:

Re: URGENT : SITE SECURITY INVALID

#18 Post by JECE » Sat May 26, 2018 3:20 pm

flash2015:
flash2015 wrote:
Fri May 25, 2018 3:27 pm
When was SSL added? I think I asked about this a couple of months ago and was told it was not a priority.
It was in February. See the announcement thread:
https://webdiplomacy.net/contrib/phpBB3 ... ?f=5&t=325

This seems to be the discussion that sparked kestasjk's interest:
https://webdiplomacy.net/contrib/phpBB3 ... f=17&t=106

jmo1121109
Lifetime Site Contributor
Posts: 1099
Joined: Fri Sep 29, 2017 4:20 pm
Karma: 2944
Contact:

Re: URGENT : SITE SECURITY INVALID

#19 Post by jmo1121109 » Sat May 26, 2018 3:33 pm

JECE wrote:
Sat May 26, 2018 3:07 pm
You can combine user's cookies from two different websites? How would that work if the browser thinks that www and non-www are two different websites?
Something like this: https://stackoverflow.com/questions/184 ... and-domain

Post Reply

Who is online

Users browsing this forum: No registered users and 77 guests