Main site has certificate issue

techmike · Post by **techmike** » Tue Jun 30, 2020 10:21 pm

Firefox doesn't like the security cert: "It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

JustaShooter · Post by **JustaShooter** » Wed Jul 01, 2020 6:20 am

Thanks, I've notified the admins.

WhyNot · Post by **WhyNot** » Wed Jul 01, 2020 6:24 am

FYI

I M on Firefox right now and the usual padlock (locked) thingie is there. Which means, secure site.

(??)

AlanM · Post by **AlanM** » Wed Jul 01, 2020 7:13 am

WhyNot wrote:FYI

I M on Firefox right now and the usual padlock (locked) thingie is there. Which means, secure site.

(??)

Chrome is also happy.

techmike · Post by **techmike** » Wed Jul 01, 2020 8:19 am

IDK, this is what I get...

Bruenor · Post by **Bruenor** » Wed Jul 01, 2020 9:44 am

My Chrome also shows the Certificate for Ohioccw.org is expired as of 6.25.2020

Looks like the script to auto-renew the LetsEncrypt certificate isn't working as expected.

JustaShooter · Post by **JustaShooter** » Wed Jul 01, 2020 7:58 pm

I notified the admins, but no response yet.

Klingon00 · Post by **Klingon00** » Mon Jul 13, 2020 11:52 am

Are there any updates on this? I'd feel more comfortable engaging with the site if the certificate was working.

JustaShooter · Post by **JustaShooter** » Mon Jul 13, 2020 1:11 pm

Klingon00 wrote:Are there any updates on this? I'd feel more comfortable engaging with the site if the certificate was working.

I keep pinging the admins, haven't gotten a response yet. Sorry, I understand your concerns, and wish there was something more I could do.

Bruenor · Post by **Bruenor** » Mon Jul 13, 2020 7:52 pm

Even with the certificate expired the data is still encrypted, so no need to panic. the web server does not stop encrypting data just because the certificate is expired, so the connection is still technically secure.

What is bad are the optics. Someone comes to the site for the first time, they get an insecure site warning, they will just close the browser tab and move on, without visiting the site.

Someone with access, just needs to get on the web server and run the 'certbot renew' command. (provided this is a Linux hosting server.)

https://certbot.eff.org/docs/using.html ... rtificates" onclick="window.open(this.href);return false;

AlanM · Post by **AlanM** » Wed Jul 15, 2020 8:56 am

What is strange is that THIS thread shows as not being secure but the thread right beside it in another tab shows secure (with the lock icon).
IIRC most threads show secure.

Ohioans For Concealed Carry Discussion Forums

Main site has certificate issue

Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue

Re: Main site has certificate issue