Filmwasters

Which Board? => Housekeeping => Topic started by: Indofunk on September 20, 2017, 07:25:52 PM

Title: Invalid security certificate?
Post by: Indofunk on September 20, 2017, 07:25:52 PM
For some reason, in all my years of logging into Filmwasters, only today was I given a security error. Maybe it's because I used Firefox for the first time in years, but then when I tried Chrome it also threw up an error. The Firefox error is more verbose:

Quote
www.filmwasters.com uses an invalid security certificate. The certificate is only valid for the following names: abluebellforest.com, www.abluebellforest.com (http://www.abluebellforest.com) The certificate expired on Friday, April 28, 2017, 7:59 PM. The current time is Wednesday, September 20, 2017, 2:20 PM. Error code: SSL_ERROR_BAD_CERT_DOMAIN

So not only is the cert expired, but it's for a different domain ??? Can we look into getting this fixed? FWIW, my hosting provider, Bluehost, offers free, autorenewing SSLs, and I know through my day job that Squarespace sites also have free, autorenewing SSLs through Let's Encrypt.
Title: Re: Invalid security certificate?
Post by: Francois on September 25, 2017, 09:46:48 PM
This is very strange...
We're already hosted by bluehost, so there shouldn't be a problem there.
Also, I'm on the site using firefox and everything looks OK... though I don't have the HTTPS everywhere plugin installed...

I'm going to check it out a bit and report back.
Title: Re: Invalid security certificate?
Post by: Francois on September 25, 2017, 09:50:17 PM
I just installed HTTPS everywhere and can't get the site to go into secure mode... hence no certificates are asked for.
Title: Re: Invalid security certificate?
Post by: Indofunk on September 27, 2017, 01:55:27 PM
What happens when you add https:// to the browser address for this page?
Title: Re: Invalid security certificate?
Post by: Francois on September 27, 2017, 10:31:43 PM
Yep, that does cause the problem you're talking about.

I'll get in touch with Ed and see what he thinks about it all
Title: Re: Invalid security certificate?
Post by: Indofunk on March 26, 2019, 11:28:59 PM
I wanted to revisit this because I just realized the same issue was happening on a couple of my personal sites. If we're on Bluehost and get free SSLs, then we just need to use those SSLs. In my case, since my sites are Wordpress sites, I just needed to add an SSL plugin that automatically loads the SSL. Looks like we're on Simple Machines, maybe there's an equivalent? Otherwise we'll have to install SSL manually via Apache, and there are lots of tutorials on that. I used to do it back in my programming days, but if I can just hit a button to install an SSL plugin, why bother? ;D
Title: Re: Invalid security certificate?
Post by: Francois on April 01, 2019, 10:56:23 PM
I know. What saves trouble is definitely worth it.
AFAIK, Ed knows about the issue but is probably too busy with his teenagers to do anything about it.

Come to think of it, I haven't had any news from Ed in a long time. He even put his family's Tumblr private...