Page 1 of 1

Firefox doesn't let me connect to Unilang

Posted: 2019-11-20, 18:20
by Woods
Any ideas why Firefox doesn't want to connect me to this website? Everything else works - I've tried with three other browsers from the same PC - two of which are based on Chromium/Blink I think, and one on Apple's WebKit.

Here's what happens when I try to connect:

Did Not Connect: Potential Security Issue

Firefox detected a potential security threat and did not continue to http://www.unilang.org because this web site requires a secure connection.

What can you do about it?

http://www.unilang.org has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

The issue is most likely with the web site, and there is nothing you can do to resolve it. You can notify the web site’s administrator about the problem.

Re: Firefox doesn't let me connect to Unilang

Posted: 2019-11-20, 20:25
by md0
If you visit https://forum.unilang.org/ you won't have any problems in Firefox.

The underlying reason is that 'www.unilang.org' tries to use the encryption certificate that doesn't have a name entry for 'www.unilang.org' (but only for 'unilang.org' and 'forum.unilang.org'). On that error page, if you click [advanced] you can read the following
Web sites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for www.unilang.org. The certificate is only valid for the following names: anaproy.nl, cloud.anaproy.nl, download.anaproy.nl, elkewijs.nl, forum.unilang.org, gayasaya.nl, home.anaproy.nl, mail.anaproy.nl, map.anaproy.nl, proycon.anaproy.nl, unilang.org

Error code: SSL_ERROR_BAD_CERT_DOMAIN

Re: Firefox doesn't let me connect to Unilang

Posted: 2020-01-19, 9:47
by Woods
md0 wrote:If you visit https://forum.unilang.org/ you won't have any problems in Firefox.

The underlying reason is that 'www.unilang.org' tries to use the encryption certificate that doesn't have a name entry for 'www.unilang.org' (but only for 'unilang.org' and 'forum.unilang.org'). On that error page, if you click [advanced] you can read the following
Web sites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for http://www.unilang.org. The certificate is only valid for the following names: anaproy.nl, cloud.anaproy.nl, download.anaproy.nl, elkewijs.nl, forum.unilang.org, gayasaya.nl, home.anaproy.nl, mail.anaproy.nl, map.anaproy.nl, proycon.anaproy.nl, unilang.org

Error code: SSL_ERROR_BAD_CERT_DOMAIN


It works! However, it's literally does only when I access everything starting from the main page https://forum.unilang.org/, if I try clicking on one of the links that remain in my search bar such as http://home.unilang.org/main/forum/viewforum.php?f=50, it doesn't work.

So I guess the maintenance / developers should add certificates to the http://www., home. etc. subdomains not because I don't have a workaround, but in order not to deter someone else from visiting the site by making them think the server is down or something.

PS Asutko myös Suomessa? :)

Re: Firefox doesn't let me connect to Unilang

Posted: 2020-01-19, 10:01
by md0
Woods wrote:It works! However, it's literally does only when I access everything starting from the main page https://forum.unilang.org/, if I try clicking on one of the links that remain in my search bar such as http://home.unilang.org/main/forum/viewforum.php?f=50, it doesn't work.

So I guess the maintenance / developers should add certificates to the http://www., home. etc. subdomains not because I don't have a workaround, but in order not to deter someone else from visiting the site by making them think the server is down or something.

PS Asutko myös Suomessa? :)


Yes, that's something only someone with server access (is it only anaproy?) can fix. There's now even an option of getting a free encryption certificate as a wildcard subdomain, like *.unilang.org, but I couldn't get it to work on my server so I guess it's more complicated than adding a few more subdomains.

PS. Joo, syyskuusta lähtien. Time flies, only six weeks left.