You are not logged in.

#1 2019-06-03 21:17:17

emgaron
Member
Registered: 2018-03-31
Posts: 13

SSL Certificate for this forum expired

No idea where to put this, so apologies for posting this in the wrong place:

Apparently,  the certificate for bbs.archlinux32.org has expired today (03/06/2019) - I can no longer connect to the forum using Firefox, as Firefox refuses to make a connection to a site that has HSTS set and an expired certificate (using Chromium to write this).

Offline

#2 2019-06-05 12:45:37

andreas_baumann
Administrator
From: Zurich, Switzerland
Registered: 2017-08-10
Posts: 757
Website

Re: SSL Certificate for this forum expired

Yep: https://bugs.archlinux32.org, https://news.archlinux32.org and https://bbs.archlinux32.org all
expired. Nothing I can do (I have no access).. (ping tyzoid :-) )

Offline

#3 2019-06-06 07:45:58

andreas_baumann
Administrator
From: Zurich, Switzerland
Registered: 2017-08-10
Posts: 757
Website

Re: SSL Certificate for this forum expired

Can we please either automatize the updating of Let's Encrypt certificates, or at least disable HSTS for those sites?
Maybe also providing a plain HTTP version NOT redirecting to HTTPS?

Offline

#4 2019-06-13 15:02:32

levi
Moderator
From: Yorkshire, UK
Registered: 2018-06-16
Posts: 393

Re: SSL Certificate for this forum expired

Yes, a plain non-redirecting http version would do me fine for the duration of the outage.  Doesn't need to be on the same domain name, so you could retain the whole hsts and redirection on the bbs-dot address, but have a different address we could enter to get to the forum over plain old http.  An automatically renewing certificate would be a nice extra from there.

I wonder if my moan on the IRC channel had the intended effect in the end.  For me, I couldn't get on here on Monday 10th and have been offline since then, but I did flag it on the channel on the 8th I think.


Architecture: pentium4, Testing repos: Yes, Hardware: EeePC 901+2GB RAM+OS half on the SD card.

Offline

#5 2019-06-13 15:17:01

andreas_baumann
Administrator
From: Zurich, Switzerland
Registered: 2017-08-10
Posts: 757
Website

Re: SSL Certificate for this forum expired

On second thought, I don't think logging into the forum or the bug reporting tool via HTTP is really a good idea..

Offline

#6 2019-06-13 15:53:10

levi
Moderator
From: Yorkshire, UK
Registered: 2018-06-16
Posts: 393

Re: SSL Certificate for this forum expired

As far as I can remember the only problem with publishing non-identifiable stuff on bugtrackers and forums like this is the increased simplicity of man-in-the-middling it, which I guess could get my password for logging in here (which I don't reuse anywhere else, but still it's best avoided FWIW).


Architecture: pentium4, Testing repos: Yes, Hardware: EeePC 901+2GB RAM+OS half on the SD card.

Offline

#7 2019-06-21 15:33:44

emgaron
Member
Registered: 2018-03-31
Posts: 13

Re: SSL Certificate for this forum expired

In any case, the certificate seems to have been updated, so cudos to whoever is responsible!

Offline

Board footer

Powered by FluxBB