Expired Certification in Some Browsers

Important Trombone Chat information starts here.
Post Reply
User avatar
Neo Bri
Posts: 1313
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Expired Certification in Some Browsers

Post by Neo Bri »

Hi Chatters,

It was brought to my attention that TromboneChat's site certificate has expired this morning at 8:45 central time. I have personally experienced no interruption in service, but I understand it might be worrying or offputting if you get a security error relating to TC. We're looking into it, rest assured.

The problem seems to be manifesting in Firefox. Thanks for your patience!
LarryPrestonRoberson
Posts: 194
Joined: Fri Mar 23, 2018 7:36 am

Re: Expired Certification in Some Browsers

Post by LarryPrestonRoberson »

It is present in Google Chrome as well. It’s mostly just annoying. It’s worse in Firefox. Every time you change pages you have to allow it. I know you guys will solve the issue. Thanks to all the guys who keep this place up and running!
User avatar
kingsk1117
Posts: 44
Joined: Mon May 21, 2018 5:46 am
Location: Chicago area

Re: Expired Certification in Some Browsers

Post by kingsk1117 »

In Firefox, I over-rode the security issue once, and it has not come up again.
User avatar
KCinAZ
Posts: 19
Joined: Fri Mar 23, 2018 12:54 pm

Re: Expired Certification in Some Browsers

Post by KCinAZ »

It's still happening in Safari as of Saturday evening.
User avatar
hyperbolica
Posts: 2792
Joined: Fri Mar 23, 2018 7:31 am

Re: Expired Certification in Some Browsers

Post by hyperbolica »

Still happening in Opera mobile.
User avatar
Neo Bri
Posts: 1313
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Re: Expired Certification in Some Browsers

Post by Neo Bri »

I took care of re-purchasing SSL certificates today and we will implement these very soon. Likely Sunday. Stay tuned.
jack
Posts: 9
Joined: Mon Mar 26, 2018 2:00 am

Re: Expired Certification in Some Browsers

Post by jack »

Neo Bri wrote: Sat Jul 07, 2018 10:15 pm I took care of re-purchasing SSL certificates today and we will implement these very soon. Likely Sunday. Stay tuned.
The current expired certificate is issued by LetsEncrypt, which issues certificates freely. EDIT: I'm curious why you didn't go with them again?

Important to note that every browser (including IE11) issues a security warning (specifically that the certificate expired on the 6th of July). The only way not to see it is by accessing the site from http rather than https, but hopefully most are accessing it over https. Once a new certificate is in place, I think it would be good to force https if possible.
Last edited by jack on Fri Jul 13, 2018 8:54 am, edited 1 time in total.
User avatar
Zandit75
Posts: 82
Joined: Mon Apr 30, 2018 9:34 pm

Re: Expired Certification in Some Browsers

Post by Zandit75 »

Is this supposed to be fixed yet? I'm still showing that the site is not secure, and getting the occasional popup.
User avatar
Matt K
Verified
Posts: 3945
Joined: Tue Mar 20, 2018 10:34 pm
Contact:

Re: Expired Certification in Some Browsers

Post by Matt K »

Depending on your browser, it takes a little bit of digging to find out why a site is labelled as "insecure". In the case of TBC, you'll notice that it isn't because the data is unencrypted (if you are using HTTPS it should be encrypted, although we currently nave it configured that you can optionally use it because of some initial login issues so we'll probably close that off when we fix the SSL cert), but that our site's ownership isn't verified.

Currently we're going through the verification process with a new vendor that we elected to use for a variety of reasons. If it were a serious security issue, we would shut the site down until it was fixed but given that the only limitation is that you can't pin down an address, we're just letting it run until we can prove the ownership of the site. Neobri filled out the paperwork yesterday but I don't believe they gave an ETA for how long they say the process will take.

Tl;dr, the "insecurity" is that a 3rd party hasn't verified the legal ownership of the site yet.
User avatar
Neo Bri
Posts: 1313
Joined: Wed Mar 21, 2018 10:30 am
Location: Netherwhere
Contact:

Re: Expired Certification in Some Browsers

Post by Neo Bri »

The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
User avatar
Zandit75
Posts: 82
Joined: Mon Apr 30, 2018 9:34 pm

Re: Expired Certification in Some Browsers

Post by Zandit75 »

All good, thanks for the update.
LarryPrestonRoberson
Posts: 194
Joined: Fri Mar 23, 2018 7:36 am

Re: Expired Certification in Some Browsers

Post by LarryPrestonRoberson »

Neo Bri wrote: Tue Jul 10, 2018 9:15 pm The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
Or, nothing like this:
http://www.tromboneforum.org/
:tongue:

Seriously though, thanks to all you guys for making this place great!
afugate
Posts: 644
Joined: Fri Mar 23, 2018 5:47 am
Location: Oklahoma City

Re: Expired Certification in Some Browsers

Post by afugate »

LarryPrestonRoberson wrote: Thu Jul 12, 2018 9:31 pm
Neo Bri wrote: Tue Jul 10, 2018 9:15 pm The verification is going to take longer than expected. This is not my choice, but it is the way it is, unfortunately. I promise that nothing nefarious is going on...mostly waiting.
Or, nothing like this:
http://www.tromboneforum.org/
:tongue:

Seriously though, thanks to all you guys for making this place great!
Just 9 more months... :wink:

--Andy in OKC
Post Reply

Return to “News & Announcements”