SSL certificate renewed (https support)

This forum is for discussing the ongoing and future projects and resources of UniLang. Please post your comments, criticism and ideas here. We are always trying to expand on things members find useful, helpful, or fun! This is also the place to report errors in systems and resources on the UniLang site.

Moderator: Forum Administrators

User avatar
proycon
Server Administrator
Posts: 2675
Joined: 2002-06-20, 20:22
Real Name: Maarten van Gompel
Gender: male
Location: Eindhoven
Country: NL The Netherlands (Nederland)
Contact:

SSL certificate renewed (https support)

Postby proycon » 2016-05-10, 20:05

We now have a proper SSL certificate for https://unilang.org and https://forum.unilang.org, for which you now longer need to add a security exception. Use of https is strongly recommended as it means your traffic is encrypted and can not be intercepted by any third party.

(SHA1 certificate fingerprint: FB:BA:6B:DB:38:BC:96:09:CE:74:81:35:32:C3:57:AA:E8:A2:26:C9)
Language is the dress of thought -- Samuel Johnson
Image
my homepage

User avatar
proycon
Server Administrator
Posts: 2675
Joined: 2002-06-20, 20:22
Real Name: Maarten van Gompel
Gender: male
Location: Eindhoven
Country: NL The Netherlands (Nederland)
Contact:

Re: SSL certificate renewed (https support)

Postby proycon » 2016-08-03, 22:24

Certificate refreshed, this will happen every three months.

(new SHA1 fingerprint: EE:BE:1B:44:54:70:83:6E:9F:4D:CE:F2:A8:F9:73:75:B4:7A:F0:BC)
Language is the dress of thought -- Samuel Johnson
Image
my homepage

User avatar
proycon
Server Administrator
Posts: 2675
Joined: 2002-06-20, 20:22
Real Name: Maarten van Gompel
Gender: male
Location: Eindhoven
Country: NL The Netherlands (Nederland)
Contact:

Re: SSL certificate renewed (https support)

Postby proycon » 2017-10-16, 9:08

Updated: 68:9A:30:7D:75:FF:7C:4F:43:62:85:9B:D0:DA:18:EF:2E:B4:24:AB
Language is the dress of thought -- Samuel Johnson
Image
my homepage

User avatar
dEhiN
Forum Administrator
Posts: 5605
Joined: 2013-08-18, 2:51
Real Name: David
Gender: male
Location: Toronto
Country: CA Canada (Canada)
Contact:

Re: SSL certificate renewed (https support)

Postby dEhiN » 2017-11-30, 22:09

proycon wrote:Updated: 68:9A:30:7D:75:FF:7C:4F:43:62:85:9B:D0:DA:18:EF:2E:B4:24:AB

Hey proycon, not sure if you're aware, but when I try to go directly to https://www.unilang.org, I get an error. I'm using Chrome, but I think the same might be happening on any browser? Anyway, this has been going on for a while - longer than since the last update. Here are the details of the error:
Your connection is not private

Attackers might be trying to steal your information from www.unilang.org (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_COMMON_NAME_INVALID

Back to safety

ADVANCED
This server could not prove that it is www.unilang.org; its security certificate is from anaproy.nl. This may be caused by a misconfiguration or an attacker intercepting your connection.

Proceed to www.unilang.org (unsafe)

It seems that once I clicked on proceed anyway, Chrome now automatically redirects and doesn't show me the error.
My TAC for 2018.

(en-CA) (ta-lk) (fr) (pt-BR) (es) (ko) (sv) (ro)

User avatar
księżycowy
Language Forum Moderator
Posts: 11845
Joined: 2006-09-13, 23:51
Real Name: Paweł
Country: US United States (United States)
Contact:

Re: SSL certificate renewed (https support)

Postby księżycowy » 2017-11-30, 22:16

That has happened to me from time to time on Firefox as well.

vijayjohn
Language Forum Moderator
Posts: 21150
Joined: 2013-01-10, 8:49
Real Name: Vijay John
Gender: male
Location: Austin
Country: US United States (United States)

Re: SSL certificate renewed (https support)

Postby vijayjohn » 2017-11-30, 22:17

I just checked on Firefox, and it happens to me there even now.

User avatar
dEhiN
Forum Administrator
Posts: 5605
Joined: 2013-08-18, 2:51
Real Name: David
Gender: male
Location: Toronto
Country: CA Canada (Canada)
Contact:

Re: SSL certificate renewed (https support)

Postby dEhiN » 2017-11-30, 22:26

Yeah on the UL FB group, someone posted about this about a month ago. I replied to use https://forum.unilang.org, which is what my bookmarks are set to.
My TAC for 2018.

(en-CA) (ta-lk) (fr) (pt-BR) (es) (ko) (sv) (ro)

User avatar
proycon
Server Administrator
Posts: 2675
Joined: 2002-06-20, 20:22
Real Name: Maarten van Gompel
Gender: male
Location: Eindhoven
Country: NL The Netherlands (Nederland)
Contact:

Re: SSL certificate renewed (https support)

Postby proycon » 2017-12-01, 9:43

Hmm, I see.. This is caused by the certificate being valid for 'unilang.org' and 'forum.unilang.org', but not 'www.unilang.org'.

I partially fixed this now by redirecting at least http://www.unilang.org to https://forum.unilang.org , the problem still will occur if you explicitly go to https://www.unilang.org (use https://unilang.org or https://forum.unilang.org instead). I'll try to add this old subdomain in the next SSL certificate renewal iteration.
Language is the dress of thought -- Samuel Johnson
Image
my homepage

User avatar
dEhiN
Forum Administrator
Posts: 5605
Joined: 2013-08-18, 2:51
Real Name: David
Gender: male
Location: Toronto
Country: CA Canada (Canada)
Contact:

Re: SSL certificate renewed (https support)

Postby dEhiN » 2017-12-02, 1:49

Sounds good; thanks!
My TAC for 2018.

(en-CA) (ta-lk) (fr) (pt-BR) (es) (ko) (sv) (ro)

User avatar
md0
Posts: 7236
Joined: 2010-08-08, 19:56
Country: CY Cyprus (Κύπρος / Kıbrıs)

Re: SSL certificate renewed (https support)

Postby md0 » 2017-12-02, 10:33

proycon wrote:Hmm, I see.. This is caused by the certificate being valid for 'unilang.org' and 'forum.unilang.org', but not 'www.unilang.org'.

I partially fixed this now by redirecting at least http://www.unilang.org to https://forum.unilang.org , the problem still will occur if you explicitly go to https://www.unilang.org (use https://unilang.org or https://forum.unilang.org instead). I'll try to add this old subdomain in the next SSL certificate renewal iteration.


If you are using Lets Encrypt, you can expand the certificate with new domains without reissuing it, as far as I know.
Unless you have it on a cronjob and don't want to interfere.
"If you like your clause structure, you can keep your clause structure"
Cypriot Greek (el-cy) | ○Standard Modern Greek of Greece (el)Assorted Englishes (en) | ↓France French (fr) | ⊖Police Procedural J-Drama Japanese (ja)Standard Turkish (tr) | ↑German Standard German (de)


Return to “Unilang - Information, Input, and Questions”

Who is online

Users browsing this forum: No registered users and 1 guest