Site certificate gone screwy?

[Flinnster]

Getting this when going to anything in the members area, or private messaging (on Firefox). Has all been fine in the past.

 

[Fuzzy]

Me too.

And a strange character appearing in text boxes.

<-this
Fuzzy2017-03-03 18:51:46

 

[slowcade]

It's probably just that ukvac uses an old sha1 certificate. Just upgrade to sha256, it should be free.

 

[markjw]

wow, that is an old SHA-1 certificate - issued in 2012 - latest versions of Chrome and Firefox both flag any site using SHA-1 certificates as insecure so exactly as slowcade thought.

Anyone here who has a site and has this problem, you can also get free certificates from https://letsencrypt.org/ - valid for 3 months and you can just keep renewing them

 

[maskeddev]

There's also a domain issue: I'm logged in to www.ukvac.com, but I'm lazy. I type in ukvac.com... links on the front page, the recent posts, they direct to the relative address ukvac.com, which I'm not logged into... this is a pain the arse. You've basically got two identical websites competing with each other.

You should decide whether the address is www.ukvac.com or ukvac.com and put in a redirect rule.

maskeddev2017-03-03 22:44:11

 

[Alpha1]

Ok this warning should have gone now.

 

[JohnBud]

been gubbed for a while, but happy to say it's all fine

 

[Brettster]

Will the SSL cert be renewed? expired on 1st May 2017!

 

[Alpha1]

It's disabled - it isn't needed anymore to access the site. We may renew it later.Alpha12017-09-03 19:04:43

 

[Brettster]

ah ok I get the odd cross site scripting warning popping up now and then
Brettster2017-09-03 22:52:42

 

[slowcade]

Alpha1: I don't think that the certificate is disabled, because the site still responds to https. And I still get certificate errors in my browser, with details about the certificate. If it were disabled that wouldn't happen.

 

[Alpha1]

It's disabled for enforcement on the forum. If anyone has links to the https urls then yes it does still respond.

I can disable that also if you want - just means it won't work at all, or I can do an https>http redirect.

 

[slowcade]

Ok, I understand. I suspect that my browser uses https automatically if available.
It doesn't bother me much, though.

 

[Alpha1]

I'll look to get it renewed for everyone.