Certificate Domain stuff?

How can I make this site better? Let me know what you'd like to see!

Moderators: khz, MattKingUSA

ssj71
Establlshed Member
Posts: 998
Joined: Tue Sep 25, 2012 6:36 pm

Certificate Domain stuff?

Postby ssj71 » Thu Jul 21, 2016 5:11 pm

I know little of such things, but when loading the page today I got this from firefox (ff v47.0):

Your connection is not secure

The owner of linuxmusicians.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Learn more…

linuxmusicians.com uses an invalid security certificate.

The certificate is only valid for the following names:
*.grus.uberspace.de, grus.uberspace.de

Error code: SSL_ERROR_BAD_CERT_DOMAIN


I trust you guys, but I think it would be good to resolve this.
_ssj71

music: https://soundcloud.com/ssj71
My plugins are Infamous! http://ssj71.github.io/infamousPlugins
I just want to get back to making music!

User avatar
magicalex
Establlshed Member
Posts: 50
Joined: Sun Jan 24, 2016 6:34 pm
Contact:

Re: Certificate Domain stuff?

Postby magicalex » Thu Jul 21, 2016 6:38 pm

I get the same message on chrome.
My name is Sandy and I sing songs: SandySingsSongs.com

Luc
Establlshed Member
Posts: 427
Joined: Fri Mar 27, 2015 1:04 pm

Re: Certificate Domain stuff?

Postby Luc » Fri Jul 22, 2016 1:41 am

Same here.

GraysonPeddie
Establlshed Member
Posts: 533
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: Certificate Domain stuff?

Postby GraysonPeddie » Fri Jul 22, 2016 3:23 am

I went into LM website...
Your connection is not private...
Went into the Suggestions forum...
Your connection is not private...
Saw the certificate thread...
Your connection is not private...
Begins to post into a topic...
Your connection is not private...
Types a post and submits my post...
Your connection is not private...
Post submission successful...
Your connection is not private...
Back to the thread and done. Goes to check in other forums...
Your connection is not private...

Chromium, will you shut the hell up!? :( LOL!!!

So I am editing my post...
Your connection is not private...
Emoji's have not been migrated over. And I actually did not see a "your post has submitted successfully" message...
Your connection is not private...
UGH!!!
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

User avatar
sadko4u
Establlshed Member
Posts: 410
Joined: Mon Sep 28, 2015 9:03 pm

Re: Certificate Domain stuff?

Postby sadko4u » Fri Jul 22, 2016 6:41 am

Getting error too:
linuxmusicians.com uses an invalid security certificate. The certificate is only valid for the following names: *.grus.uberspace.de, grus.uberspace.de Error code: SSL_ERROR_BAD_CERT_DOMAIN

folderol
Establlshed Member
Posts: 335
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Contact:

Re: Certificate Domain stuff?

Postby folderol » Fri Jul 22, 2016 7:45 am

At the risk of getting boring, I've got the same message :(

GraysonPeddie
Establlshed Member
Posts: 533
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: Certificate Domain stuff?

Postby GraysonPeddie » Fri Jul 22, 2016 12:46 pm

I'm going to ignore certificate warnings in the future, including other websites. If people are using self-signed certificates in other websites, I don't mind.

Yes, it's dangerous and there can be a possibility for a man-in-the-middle attack, but so what? I just don't care to heed certificate warnings anymore. It makes me insist that my connection is always private and I will continue to insist from now on.
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

tux99
Establlshed Member
Posts: 297
Joined: Fri Sep 28, 2012 10:42 am
Contact:

Re: Certificate Domain stuff?

Postby tux99 » Sun Jul 24, 2016 11:19 am

To the admins of this site:

Can you please disable the encryption, if you can't fix the certificate domain name mismatch?

The way it is now it doesn't add any security (as the security certificate is unverified for this domain name, therefore wide open to MITM attacks), and it just gets people used to clicking away security warnings without reading them, i.e. it promotes unsafe behaviour.

Thanks.


P.S: is there actually anybody in charge for this site or has it been abandoned to itself?
(I mean an admin, as mods don't have the power to fix tihs)

GraysonPeddie
Establlshed Member
Posts: 533
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: Certificate Domain stuff?

Postby GraysonPeddie » Mon Jul 25, 2016 2:06 am

Due to the certificate error, Chromium won't automatically fill in username and password, so I had to use KeePass2 for that.

Thanks LinuxMusicians for logging me out despite that I did not click in "Log out." How do I know when the cookie expire?
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

Spanner
Establlshed Member
Posts: 47
Joined: Mon Mar 10, 2014 8:18 pm

Re: Certificate Domain stuff?

Postby Spanner » Thu Jul 28, 2016 4:31 am

Why not fix this:

Your connection is not secure

The owner of linuxmusicians.com has configured their website improperly. To protect your information from being stolen, [your] browser has not connected to this website.

linuxmusicians.com uses an invalid security certificate.


The certificate is only valid for the following names: *.grus.uberspace.de, grus.uberspace.de


Error code: SSL_ERROR_BAD_CERT_DOMAIN




?

GraysonPeddie
Establlshed Member
Posts: 533
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: Certificate Domain stuff?

Postby GraysonPeddie » Thu Jul 28, 2016 10:16 am

Still waiting for someone to fix the site with certificate error. It's been a week...
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

tnovelli
Establlshed Member
Posts: 250
Joined: Wed Apr 20, 2011 4:52 pm

Re: Certificate Domain stuff?

Postby tnovelli » Fri Jul 29, 2016 7:28 pm

Same here. I'll come back when they get a valid cert or turn SSL back off.

folderol
Establlshed Member
Posts: 335
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Contact:

Re: Certificate Domain stuff?

Postby folderol » Fri Jul 29, 2016 7:36 pm

I confess I'm surprised there has been no response at all. Even "Sorry guys were looking at it" would help.

GraysonPeddie
Establlshed Member
Posts: 533
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: Certificate Domain stuff?

Postby GraysonPeddie » Fri Jul 29, 2016 10:35 pm

Here's an article about people ignoring certificate warnings: http://www.cnet.com/news/web-users-igno ... -warnings/

Even I would ignore self-signed certificates. :) Besides, it's just not effective anymore.
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

User avatar
raboof
Establlshed Member
Posts: 1411
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL
Contact:

Re: Certificate Domain stuff?

Postby raboof » Sun Jul 31, 2016 7:13 am

tux99 wrote:Can you please disable the encryption, if you can't fix the certificate domain name mismatch?


Even better, I fixed the SSL configuration :).

tux99 wrote:The way it is now it doesn't add any security (as the security certificate is unverified for this domain name, therefore wide open to MITM attacks)


Actually arguably it still protects against passive attackers, but indeed...

tux99 wrote:it just gets people used to clicking away security warnings without reading them, i.e. it promotes unsafe behaviour.


This is a real issue and

tux99 wrote:is there actually anybody in charge for this site or has it been abandoned to itself?


That'd be me... but unfortunately though I was aware of the issue I was on the road and didn't have access to the proper credentials to fix the issue :(.

I agree I should've clarified in his thread, though, sorry.

All should be good now again, let me know if it isn't!


Return to “Suggestion Box”

Who is online

Users browsing this forum: No registered users and 1 guest