Expired SSL certificate

#1

Post by chton » Thu, Apr 09, 2015, 9:37 AM UTC

Expired SSL certificate
manjaro.github.io

Re: Expired SSL certificate

#2

Post by seqizz » Thu, Apr 09, 2015, 9:40 AM UTC

Should we set it to 1st of April?

Re: Expired SSL certificate

#3

Post by bitJericho » Thu, Apr 09, 2015, 9:54 AM UTC

Don't pretty much all browsers let you accept using an expired certificate?

Re: Expired SSL certificate

#4

Post by ins0 » Thu, Apr 09, 2015, 9:58 AM UTC

bitJericho wrote: post #3

Don't pretty much all browsers let you accept using an expired certificate?

Yes was my thought also but put glasses on this workaround is even better, as it may scrow up more ssl certs from other domains.

Re: Expired SSL certificate

#5

Post by jng » Thu, Apr 09, 2015, 10:00 AM UTC

What is shocking is that they still haven't found the way to properly fix it after 3 days.

I updated some SSL certificates last week (which even required contortions such as moving to a new issuer since some legacy software requires old-style SHA-1 signed ones which our current one doesn't provide), and it didn't take more than one (long) day of work.

Re: Expired SSL certificate

#6

Post by lauriswtf » Thu, Apr 09, 2015, 10:00 AM UTC

Why is this on the frontpage?

Re: Expired SSL certificate

#7

Post by billpg » Thu, Apr 09, 2015, 10:02 AM UTC

I wonder if browsers should for (say) a week after a cert has expired, show an error so alarms are raised, but allow the dialog to be dismissed with an OK instead of all the "Confirm Security Exception" that would go on for a more serious cert rejection.

Re: Expired SSL certificate

#8

Post by thejosh » Thu, Apr 09, 2015, 10:03 AM UTC

WTF, changing your PC date is not a solution! This will cause more issues.

Re: Expired SSL certificate

#9

Post by ins0 » Thu, Apr 09, 2015, 10:06 AM UTC

billpg wrote: post #7

I wonder if browsers should for (say) a week after a cert has expired, show an error so alarms are raised, but allow the dialog to be dismissed with an OK instead of all the "Confirm Security Exception" that would go on for a more serious cert rejection.

That is by far not the job of a browser to remind server administrators to renew there certs and display that message to random users.

Re: Expired SSL certificate

#10

Post by jonathonf » Thu, Apr 09, 2015, 10:09 AM UTC

bitJericho wrote: post #3

Don't pretty much all browsers let you accept using an expired certificate?

The issue is with HSTS. If you've visited the site before you've likely cached that SSL is required and your browser will refuse to connect. Using e.g. a 'private window' will allow it to be bypassed.