Expired Certification in Some Browsers

Important Trombone Chat information starts here.
Post Reply
User avatar
Neo Bri
Posts: 622
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Expired Certification in Some Browsers

Post by Neo Bri » Fri Jul 06, 2018 10:21 pm

Hi Chatters,

It was brought to my attention that TromboneChat's site certificate has expired this morning at 8:45 central time. I have personally experienced no interruption in service, but I understand it might be worrying or offputting if you get a security error relating to TC. We're looking into it, rest assured.

The problem seems to be manifesting in Firefox. Thanks for your patience!
________________________________________________________
Get the word out! Make www.trombonechat.com our community!
LarryPrestonRoberson
Posts: 27
Joined: Fri Mar 23, 2018 7:36 am

Re: Expired Certification in Some Browsers

Post by LarryPrestonRoberson » Fri Jul 06, 2018 11:51 pm

It is present in Google Chrome as well. It’s mostly just annoying. It’s worse in Firefox. Every time you change pages you have to allow it. I know you guys will solve the issue. Thanks to all the guys who keep this place up and running!
kingsk1117
Posts: 3
Joined: Mon May 21, 2018 5:46 am

Re: Expired Certification in Some Browsers

Post by kingsk1117 » Sat Jul 07, 2018 5:35 am

In Firefox, I over-rode the security issue once, and it has not come up again.
User avatar
KCinAZ
Posts: 4
Joined: Fri Mar 23, 2018 12:54 pm

Re: Expired Certification in Some Browsers

Post by KCinAZ » Sat Jul 07, 2018 9:15 pm

It's still happening in Safari as of Saturday evening.
hyperbolica
Posts: 146
Joined: Fri Mar 23, 2018 7:31 am

Re: Expired Certification in Some Browsers

Post by hyperbolica » Sat Jul 07, 2018 9:26 pm

Still happening in Opera mobile.
User avatar
Neo Bri
Posts: 622
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Re: Expired Certification in Some Browsers

Post by Neo Bri » Sat Jul 07, 2018 10:15 pm

I took care of re-purchasing SSL certificates today and we will implement these very soon. Likely Sunday. Stay tuned.
________________________________________________________
Get the word out! Make www.trombonechat.com our community!
jack
Posts: 9
Joined: Mon Mar 26, 2018 2:00 am

Re: Expired Certification in Some Browsers

Post by jack » Sun Jul 08, 2018 12:16 pm

Neo Bri wrote:
Sat Jul 07, 2018 10:15 pm
I took care of re-purchasing SSL certificates today and we will implement these very soon. Likely Sunday. Stay tuned.
The current expired certificate is issued by LetsEncrypt, which issues certificates freely. EDIT: I'm curious why you didn't go with them again?

Important to note that every browser (including IE11) issues a security warning (specifically that the certificate expired on the 6th of July). The only way not to see it is by accessing the site from http rather than https, but hopefully most are accessing it over https. Once a new certificate is in place, I think it would be good to force https if possible.
Last edited by jack on Fri Jul 13, 2018 8:54 am, edited 1 time in total.
User avatar
Zandit75
Posts: 45
Joined: Mon Apr 30, 2018 9:34 pm

Re: Expired Certification in Some Browsers

Post by Zandit75 » Tue Jul 10, 2018 7:36 pm

Is this supposed to be fixed yet? I'm still showing that the site is not secure, and getting the occasional popup.
User avatar
Matt K
Posts: 571
Joined: Tue Mar 20, 2018 10:34 pm

Re: Expired Certification in Some Browsers

Post by Matt K » Tue Jul 10, 2018 8:32 pm

Depending on your browser, it takes a little bit of digging to find out why a site is labelled as "insecure". In the case of TBC, you'll notice that it isn't because the data is unencrypted (if you are using HTTPS it should be encrypted, although we currently nave it configured that you can optionally use it because of some initial login issues so we'll probably close that off when we fix the SSL cert), but that our site's ownership isn't verified.

Currently we're going through the verification process with a new vendor that we elected to use for a variety of reasons. If it were a serious security issue, we would shut the site down until it was fixed but given that the only limitation is that you can't pin down an address, we're just letting it run until we can prove the ownership of the site. Neobri filled out the paperwork yesterday but I don't believe they gave an ETA for how long they say the process will take.

Tl;dr, the "insecurity" is that a 3rd party hasn't verified the legal ownership of the site yet.
User avatar
Neo Bri
Posts: 622
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Re: Expired Certification in Some Browsers

Post by Neo Bri » Tue Jul 10, 2018 9:15 pm

The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
________________________________________________________
Get the word out! Make www.trombonechat.com our community!
User avatar
Zandit75
Posts: 45
Joined: Mon Apr 30, 2018 9:34 pm

Re: Expired Certification in Some Browsers

Post by Zandit75 » Tue Jul 10, 2018 10:07 pm

All good, thanks for the update.
LarryPrestonRoberson
Posts: 27
Joined: Fri Mar 23, 2018 7:36 am

Re: Expired Certification in Some Browsers

Post by LarryPrestonRoberson » Thu Jul 12, 2018 9:31 pm

Neo Bri wrote:
Tue Jul 10, 2018 9:15 pm
The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
Or, nothing like this:
http://www.tromboneforum.org/
:tongue:

Seriously though, thanks to all you guys for making this place great!
afugate
Posts: 49
Joined: Fri Mar 23, 2018 5:47 am

Re: Expired Certification in Some Browsers

Post by afugate » Fri Jul 13, 2018 6:14 am

LarryPrestonRoberson wrote:
Thu Jul 12, 2018 9:31 pm
Neo Bri wrote:
Tue Jul 10, 2018 9:15 pm
The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
Or, nothing like this:
http://www.tromboneforum.org/
:tongue:

Seriously though, thanks to all you guys for making this place great!
Just 9 more months... :wink:

--Andy in OKC
Post Reply

Return to “News & Announcements”