HTTPS Security Certificate Problem (FIXED)

If the judge doesn't behave correctly or you found another problem, report it here!
Forum rules
Bugs
In addition to the general Forum Guidelines (see here: viewtopic.php?f=130&t=15441), there are additional rules for posting in this forum.
1. Members should read the ‘Bugs Forum Guidelines’ thread.
2. In rare situations members have been known to post false bug reports in order to affect the game. This is considered cheating.
3. Please don't post information that might be detrimental to the game, such as revealing the power who sent a message. If further information is required by Admin to investigate the bug, you will be asked to provide it.
If the game a bug may have occurred in is anonymous, including Gunboat and Public Press Only, it is best to send a Private Message to the SITE HELP! group or to post using the Dolph Shtoss account rather than break anonymity.

HTTPS Security Certificate Problem (FIXED)

Postby NoPunIn10Did » 09 Aug 2018, 17:10

I'm seeing a warning message when I access the site (image attached). I had to add an exception in order to access the site and forums. I suspect something is either out of date or configured improperly with the SSL certificate.
Attachments
certificate problem.PNG
Security Certificate Warning
certificate problem.PNG (17.03 KiB) Viewed 531 times
NoPunIn10Did
Moderator (Forums only)

Variant GM, Designer & Collaborator
User avatar
NoPunIn10Did
Moderator
Moderator
 
Posts: 1700
Joined: 17 Aug 2011, 00:17
Location: North Carolina
Class: Ambassador
Standard rating: 1000
All-game rating: 1358
Timezone: GMT-5

Re: HTTPS Security Certificate Problem

Postby PonderStibbons » 09 Aug 2018, 17:33

The certificate's not bad, the site's still sending it, it's just expired. You need to renew your certificate every now and then and it looks like that hasn't happened. The reason you don't usually trust expired certificates is that their revocation status is no longer published. I don't know about you but I'm fine to trust that a certificate authority wouldn't have found that the good folks of playdiplomacy.com were up to anything particularly naughty since August 9. By my understanding so long as it still says https in the url and the certificate being sent sending matches the one below then you're no more vulnerable to man in the middle attacks than you were yesterday. If you're scared maybe don't make any donations, but I see no real reason not to keep stabbing ;).


NET::ERR_CERT_DATE_INVALID
Subject: playdiplomacy.com

Issuer: Let's Encrypt Authority X3

Expires on: 9 Aug 2018

Current date: 9 Aug 2018

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
User avatar
PonderStibbons
Premium Member
 
Posts: 14
Joined: 09 Jul 2018, 15:05
Class: Ambassador
Standard rating: 1047
All-game rating: 1223
Timezone: GMT

Re: HTTPS Security Certificate Problem

Postby duckling » 09 Aug 2018, 17:50

This happened a few months back, too.

Let’s Encrypt certs can be autorenewed, but not all sites have that process implemented.
They fixed it quickly last time, maybe auto renewal isn’t implemented, or maybe the process failed.
duckling
Premium Member
 
Posts: 140
Joined: 06 Jan 2010, 17:48
Class: Star Ambassador
Standard rating: 1142
All-game rating: 1186
Timezone: GMT+1

Re: HTTPS Security Certificate Problem

Postby duckling » 09 Aug 2018, 17:52

duckling wrote:This happened a few months back, too.

Let’s Encrypt certs can be autorenewed, but not all sites have that process implemented.
They fixed it quickly last time, maybe auto renewal isn’t implemented, or maybe the process failed.



Ah.. found the previous fix from May: they implemented monthly autorenewal, according to SuperDipsy.
Since the cert that expired now is from May, it seems that hasn’t been happening.
duckling
Premium Member
 
Posts: 140
Joined: 06 Jan 2010, 17:48
Class: Star Ambassador
Standard rating: 1142
All-game rating: 1186
Timezone: GMT+1

Re: HTTPS Security Certificate Problem

Postby Aurelia1 » 09 Aug 2018, 18:16

I have this problem too. My phone simply won't let me come on here, and on my computer, I have to get past the warning thing every time I change to a new link on this site. How do you add an exception?
Bronze Classicist

“Happiness can be found in the darkest of times if one only remembers to turn on the light.” -Albus Dumbledore
“There’s a million things I haven’t done. Just you wait, just you wait.”-Hamilton
User avatar
Aurelia1
Premium Member
 
Posts: 113
Joined: 14 Jul 2018, 02:01
Location: My imagination
Class: Ambassador
Standard rating: 971
All-game rating: 947
Timezone: GMT-5

Re: HTTPS Security Certificate Problem

Postby duckling » 09 Aug 2018, 18:21

Aurelia1 wrote:I have this problem too. My phone simply won't let me come on here, and on my computer, I have to get past the warning thing every time I change to a new link on this site. How do you add an exception?



That depends on which browser you use, so google it if you want to. Some don’t allow it anymore.
But I would just live with the warning if I were you. This should not be a long term thing, and the exception wouldn’t be valid if it happens again anyway.
Just take a deep breath and wait for he rescue :)
duckling
Premium Member
 
Posts: 140
Joined: 06 Jan 2010, 17:48
Class: Star Ambassador
Standard rating: 1142
All-game rating: 1186
Timezone: GMT+1

Re: HTTPS Security Certificate Problem

Postby super_dipsy » 09 Aug 2018, 20:06

Yep,the certificate has expired. I have notified the server people, they should get it sorted.
User avatar
super_dipsy
Site Admin
Site Admin
 
Posts: 11537
Joined: 04 Nov 2009, 17:43
Class: Ambassador
Standard rating: (1000)
All-game rating: (956)
Timezone: GMT

Re: HTTPS Security Certificate Problem (FIXED)

Postby super_dipsy » 09 Aug 2018, 21:47

Sorted now. Auto renew did not auto renew.
User avatar
super_dipsy
Site Admin
Site Admin
 
Posts: 11537
Joined: 04 Nov 2009, 17:43
Class: Ambassador
Standard rating: (1000)
All-game rating: (956)
Timezone: GMT

Re: HTTPS Security Certificate Problem (FIXED)

Postby duckling » 09 Aug 2018, 23:54

Hope they put a monitor on it now, then :)
duckling
Premium Member
 
Posts: 140
Joined: 06 Jan 2010, 17:48
Class: Star Ambassador
Standard rating: 1142
All-game rating: 1186
Timezone: GMT+1


Return to Bugs

Who is online

Users browsing this forum: No registered users and 3 guests