Site certifcate expired

[mikew]

It appears that the SSL certificate for the site expired last week.

[M2]

Got it, thanks!

[DFRESH]

Fixed. Sorry for the delay.

[magnetfreezer]

SSL certificate is showing expired again.

[DFRESH]

I just checked the certs and they're good to go... Can you screenshot what you're seeing?

[magnetfreezer]

5 hours ago, DFRESH said:

I just checked the certs and they're good to go... Can you screenshot what you're seeing?

By default, BaseOps doesn't redirect to https - I changed it to https://www.flyingsquadron.com/forums/ in the address bar to try and log in securely.

[DFRESH]

Should be fixed now.

[Catman]

Showing Not Secure for me.

Also, I don't know where you get your certificates, but https://letsencrypt.org/ is always an option.

[magnetfreezer]

6 hours ago, Catman said:

Showing Not Secure for me.

Also, I don't know where you get your certificates, but https://letsencrypt.org/ is always an option.

I got this from the Chrome debugging tool:

Also some other warnings about stylesheets, etc. being loaded from the insecure side - looks like the default of a lot of the site is to point to the non-HTTPS side for embedded things even if you go to the HTTPS version.

 

[SurelySerious]

1 hour ago, magnetfreezer said:

I got this from the Chrome debugging tool:

Also some other warnings about stylesheets, etc. being loaded from the insecure side - looks like the default of a lot of the site is to point to the non-HTTPS side for embedded things even if you go to the HTTPS version.

 

Checks. It’s not a can-it-go-secure problem, it’s that if you go secure and click anything on the site, it points you to non-secure. 

[Catman]

13 minutes ago, SurelySerious said:

Checks. It’s not a can-it-go-secure problem, it’s that if you go secure and click anything on the site, it points you to non-secure. 

*goes into web code*

*Ctrl+F: http*

*replace with https*

*profit*

[ThreeHoler]

Better (add to .htaccess):

RewriteEngine OnRewriteCond %{HTTPS} offRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Sent from my iPhone using Baseops Network mobile app

[drewpey]

[magnetfreezer]

 

Looks like it expired a few weeks ago,  also the login username/password form is not HTTPS for some reason

 

[DFRESH]

Sorry guys, I'll get on that ASAP

[magnetfreezer]

Expired again (shows 16 April 21).

[Kiloalpha]

I'm getting a warning the site is unsecured. Tested and confirmed on both Microsoft Edge and Mozilla Firefox.

Edit: Add in iOS as well.

Edited May 16, 2021 by Kiloalpha

[StoleIt]

Getting this warning:

Quote

This server could not prove that it is www.flyingsquadron.com; its security certificate expired 2 days ago. This may be caused by a misconfiguration or an attacker intercepting your connection. Your computer's clock is currently set to Wednesday, November 16, 2022. Does that look right? If not, you should correct your system's clock and then refresh this page.

 

[HuggyU2]

What's the ETIC on fixing the site certificate?

[Lord Ratner]

Does whoever is running this site need help with certificates? I have no idea where it's being hosted or how, but this should be an automated process.

This is a really low-traffic site, so I can host it pretty easily on my servers if needed. 

 

Lemme know.

 

[GrndPndr]

Just to be clear, those of us with Chrome cannot access BO at all.  On Firefox (as you all know) one has to click through with an exception.

Do we need a go-fund-me or something to pay for the new SSL certificate?  I will donate to that (or even pay for it outright).

[uhhello]

1 hour ago, GrndPndr said:

Just to be clear, those of us with Chrome cannot access BO at all.  On Firefox (as you all know) one has to click through with an exception.

Do we need a go-fund-me or something to pay for the new SSL certificate?  I will donate to that (or even pay for it outright).

I was able to access with chrome last couple days.  Just had to bypass the warning?

[Lord Ratner]

6 hours ago, GrndPndr said:

Just to be clear, those of us with Chrome cannot access BO at all.  On Firefox (as you all know) one has to click through with an exception.

Do we need a go-fund-me or something to pay for the new SSL certificate?  I will donate to that (or even pay for it outright).

They are free. Just has to be setup properly. I'm actually upgrading my servers this month, so I could host it easily. Won't be as bulletproof as a datacenter, but it'll be cheaper 🤣. And the certificates won't expire

[DFRESH]

It's fixed and will be forever now.

[DFRESH]

On 11/18/2022 at 12:47 PM, GrndPndr said:

Just to be clear, those of us with Chrome cannot access BO at all.  On Firefox (as you all know) one has to click through with an exception.

Do we need a go-fund-me or something to pay for the new SSL certificate?  I will donate to that (or even pay for it outright).

Thank you for that offer. The advertising covers the cost of the server, domain name, and now the SSL. I was doing certificates myself, but it was time consuming and when life was too busy (like the last few days), I kept dropping it out of my crosscheck. I've added automated certificate management and it shouldn't happen again.