SSL Certificate Error

Problem with the site? Got a suggestion? Got feedback? Post here and the staff will discuss it with you.
Post Reply
hounsell

SSL Certificate Error

Post by hounsell »

I'm getting an invalid certificate error when visiting the site now:
Image

Looking at it, looks like you're still using a StartCom certificate? Bad idea, I'm surprised you haven't had problems sooner than this.

https://security.googleblog.com/2016/10 ... rtcom.html

Probably better to move to something else, like LetsEncrypt.

martysmarty
Donator
Posts: 26
Joined: Mon Jun 20, 2011 12:05 pm

Re: SSL Certificate Error

Post by martysmarty »

Yep. Startcom is a bad idea.

Admins: If you contact me by PM I'll happily sponsor a Comodo, Geotrust, Thawte or Symantec certificate free of charge.

mrpijey
User avatar
Administrator
Posts: 9188
Joined: Tue Feb 12, 2008 5:28 pm
Contact:

Re: SSL Certificate Error

Post by mrpijey »

Weren't Symantec certs also in the red zone as of recent?
Image
Official guidelines: Contribution Guidelines
Channels: Discord :: Twitter :: YouTube

martysmarty
Donator
Posts: 26
Joined: Mon Jun 20, 2011 12:05 pm

Re: SSL Certificate Error

Post by martysmarty »

mrpijey wrote:Weren't Symantec certs also in the red zone as of recent?
Along with Geotrust and Thawte, yea. Although nothing is sure yet, and not "as bad as" Startcom in that regards. I'd recommend Comodo :)

Andy
User avatar
Administrator
Posts: 12815
Joined: Fri Aug 18, 2006 11:47 am
Location: United Kingdom
Contact:

Re: SSL Certificate Error

Post by Andy »

I'll look into this issue this evening and look at swapping. I didn't realise there were issues with this to be honest. Although interestingly I'm still seeing it as secure on Chrome.

hounsell

Re: SSL Certificate Error

Post by hounsell »

Looks like they're tightening it further - I'm running the dev build.

This commit was included in the latest dev build:
https://chromium.googlesource.com/chrom ... 9700201686

Looks like before they were white-listing the top 500k domains (which I guess BA fits into), but now they've reduced it to the top 100k domains.

Andy
User avatar
Administrator
Posts: 12815
Joined: Fri Aug 18, 2006 11:47 am
Location: United Kingdom
Contact:

Re: SSL Certificate Error

Post by Andy »

Either way it's worth changing as it'll only end up in the stable builds. I'll look into it as soon as I have time. Doesn't look like LetsEncrypt is too difficult as they supply the necessary software to build the certificates. Thanks for letting me know.

Andy
User avatar
Administrator
Posts: 12815
Joined: Fri Aug 18, 2006 11:47 am
Location: United Kingdom
Contact:

Re: SSL Certificate Error

Post by Andy »

Alright, that was pretty easy to do so it should be all sorted now.

A.S. aka nanocomp.invent.
Posts: 26
Joined: Wed Apr 12, 2017 6:42 am
Location: New York

Re: SSL Certificate Error

Post by A.S. aka nanocomp.invent. »

hounsell wrote:I'm getting an invalid certificate error when visiting the site now:
Image

Looking at it, looks like you're still using a StartCom certificate? Bad idea, I'm surprised you haven't had problems sooner than this.

https://security.googleblog.com/2016/10 ... rtcom.html

Probably better to move to something else, like LetsEncrypt.
My browser is showing that the certificate is now "ESET SSL Filter CA", its doing it for every https website. Does anyone know what this is?

mrpijey
User avatar
Administrator
Posts: 9188
Joined: Tue Feb 12, 2008 5:28 pm
Contact:

Re: SSL Certificate Error

Post by mrpijey »

You're using an ESET product on your computer (firewall etc) that filters the traffic and adds its own cert to all sites you visit.
Image
Official guidelines: Contribution Guidelines
Channels: Discord :: Twitter :: YouTube

ACM-2017
Permanently Banned
Posts: 7
Joined: Thu May 11, 2017 7:17 pm

Re: SSL Certificate Error

Post by ACM-2017 »

Andy wrote:Alright, that was pretty easy to do so it should be all sorted now.
Easy but it would be if they offered longer then ninety day lifetimes for certificates, would be more than adequate for most forums.

Andy
User avatar
Administrator
Posts: 12815
Joined: Fri Aug 18, 2006 11:47 am
Location: United Kingdom
Contact:

Re: SSL Certificate Error

Post by Andy »

There is no need for longer when you use their automated tools as they perform auto extension every 30 days.

Post Reply