SSL Certificate Error
-
hounsell
SSL Certificate Error
I'm getting an invalid certificate error when visiting the site now:
Looking at it, looks like you're still using a StartCom certificate? Bad idea, I'm surprised you haven't had problems sooner than this.
https://security.googleblog.com/2016/10 ... rtcom.html
Probably better to move to something else, like LetsEncrypt.
Looking at it, looks like you're still using a StartCom certificate? Bad idea, I'm surprised you haven't had problems sooner than this.
https://security.googleblog.com/2016/10 ... rtcom.html
Probably better to move to something else, like LetsEncrypt.
-
martysmarty
- Donator
- Posts: 26
- Joined: Mon Jun 20, 2011 12:05 pm
Re: SSL Certificate Error
Yep. Startcom is a bad idea.
Admins: If you contact me by PM I'll happily sponsor a Comodo, Geotrust, Thawte or Symantec certificate free of charge.
Admins: If you contact me by PM I'll happily sponsor a Comodo, Geotrust, Thawte or Symantec certificate free of charge.
Re: SSL Certificate Error
Weren't Symantec certs also in the red zone as of recent?
-
martysmarty
- Donator
- Posts: 26
- Joined: Mon Jun 20, 2011 12:05 pm
Re: SSL Certificate Error
Along with Geotrust and Thawte, yea. Although nothing is sure yet, and not "as bad as" Startcom in that regards. I'd recommend Comodomrpijey wrote:Weren't Symantec certs also in the red zone as of recent?
Re: SSL Certificate Error
I'll look into this issue this evening and look at swapping. I didn't realise there were issues with this to be honest. Although interestingly I'm still seeing it as secure on Chrome.
-
hounsell
Re: SSL Certificate Error
Looks like they're tightening it further - I'm running the dev build.
This commit was included in the latest dev build:
https://chromium.googlesource.com/chrom ... 9700201686
Looks like before they were white-listing the top 500k domains (which I guess BA fits into), but now they've reduced it to the top 100k domains.
This commit was included in the latest dev build:
https://chromium.googlesource.com/chrom ... 9700201686
Looks like before they were white-listing the top 500k domains (which I guess BA fits into), but now they've reduced it to the top 100k domains.
Re: SSL Certificate Error
Either way it's worth changing as it'll only end up in the stable builds. I'll look into it as soon as I have time. Doesn't look like LetsEncrypt is too difficult as they supply the necessary software to build the certificates. Thanks for letting me know.
Re: SSL Certificate Error
Alright, that was pretty easy to do so it should be all sorted now.
-
A.S. aka nanocomp.invent.
- Posts: 26
- Joined: Wed Apr 12, 2017 6:42 am
- Location: New York
Re: SSL Certificate Error
My browser is showing that the certificate is now "ESET SSL Filter CA", its doing it for every https website. Does anyone know what this is?hounsell wrote:I'm getting an invalid certificate error when visiting the site now:
Looking at it, looks like you're still using a StartCom certificate? Bad idea, I'm surprised you haven't had problems sooner than this.
https://security.googleblog.com/2016/10 ... rtcom.html
Probably better to move to something else, like LetsEncrypt.
Re: SSL Certificate Error
You're using an ESET product on your computer (firewall etc) that filters the traffic and adds its own cert to all sites you visit.
Re: SSL Certificate Error
Easy but it would be if they offered longer then ninety day lifetimes for certificates, would be more than adequate for most forums.Andy wrote:Alright, that was pretty easy to do so it should be all sorted now.
Re: SSL Certificate Error
There is no need for longer when you use their automated tools as they perform auto extension every 30 days.