Page 1 of 1

SSL Certificate

Posted: Fri Apr 23, 2021 10:32 pm
by babyzantine
Anyone know if the SSL Certificate is going to be updated hastily? Me and my friends have been playing a game here for a bit and now that the ticket expired today it's causing problems for the less technical of us trying to put orders in.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 2:05 am
by BobMcBob
Please, yes. It's rather frustrating. However, if you change the https to a http it doesn't give you the warning.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 3:52 am
by Szpoti
We are working on the issue.
You still can connect, and use the website if you force the connection by hitting the 'advanced' button, and choosing 'Proceed to webdiplomacy.net (unsafe)'.

If you're experiencing problems with logging in, or with submitting the orders. send us a ticket to [email protected].

Re: SSL Certificate

Posted: Sat Apr 24, 2021 4:27 am
by pyxxy
For choosing the "Proceed" option, for me it seems like I have to keep doing it over and over from Chrome but _only once_ for Firefox. Just a psa.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 4:30 am
by kennny
The real question is why webdiplomacy doesn't redirect to https by default. Seems like a simple rewrite rule in the apache config...

Re: SSL Certificate

Posted: Sat Apr 24, 2021 2:51 pm
by JECE
kennny wrote:
Sat Apr 24, 2021 4:30 am
The real question is why webdiplomacy doesn't redirect to https by default. Seems like a simple rewrite rule in the apache config...
I believe that webDiplomacy did redirect to https for some years. I didn't realize that it didn't redirect to https anymore.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 2:55 pm
by JECE
JECE wrote:
Sat Apr 24, 2021 2:51 pm
kennny wrote:
Sat Apr 24, 2021 4:30 am
The real question is why webdiplomacy doesn't redirect to https by default. Seems like a simple rewrite rule in the apache config...
I believe that webDiplomacy did redirect to https for some years. I didn't realize that it didn't redirect to https anymore.
Although maybe I'm misremembering:
kestasjk wrote:
Sat Feb 24, 2018 9:33 am
We've got a free SSL certificate from https://letsencrypt.org/ , in case an over-enthusiastic player decides to tap your internet to read your press, so you can now use:

https://webdiplomacy.net/
https://www.webdiplomacy.net/

I'm interested in anyone who gets a browser warning from the above addresses. It is a free cert, not VeriSign, so I can't be sure if all browsers will recognize the certificate (if so http:// will still work)

Re: SSL Certificate

Posted: Sat Apr 24, 2021 3:36 pm
by flash2015
I did get the rule added for https everywhere to always force webdip to https. So if it does automatically redirect, it could be just because you have the https everywhere plugin installed.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 5:52 pm
by graeme_moss
I'm having real trouble getting to the site and seeing maps/posting moves now. I consider myself more technical than the average player, and if it's preventing me from playing, I wonder about others... is there any fix in sight?

Re: SSL Certificate

Posted: Sat Apr 24, 2021 6:29 pm
by kennny
It's a simple run of certbot (or acme.sh) depending on how things are configured.

Literally less than 30 seconds in a terminal to update the cert and restart the webserver....just need an admin with access to do that.

Re: SSL Certificate

Posted: Sat Apr 24, 2021 8:25 pm
by graeme_moss
Note that some browsers seem to handle this better than others. Brave won't let me see the map and/or the dropdown boxes for orders. However safari seems fine with it.

Re: SSL Certificate

Posted: Sun Apr 25, 2021 8:19 am
by yavuzovic
graeme_moss wrote:
Sat Apr 24, 2021 8:25 pm
Note that some browsers seem to handle this better than others. Brave won't let me see the map and/or the dropdown boxes for orders. However safari seems fine with it.
Brave doesn't let me use http instead of https. That's annoying.