Expired SSL certificate

rbakersmith

Well-Known Member
Did someone forget to renew the SSL certificate?


Chrome throws up some pretty nasty warning pages when you try to visit the site...
 

nearlyyellow

Well-Known Member
Did someone forget to renew the SSL certificate?


Chrome throws up some pretty nasty warning pages when you try to visit the site...
No warning from Firefox, at least with the security options I have in place.
I assume you used caution when entering registration details for this site? No personally identifying information? You are anonymous on this site, aren't you? If that's the case in the event that anyone hijacked your ID on this site it shouldn't cause you too much inconvenience. On a site like this I would have thought it is more of a concern for the mods and the owners of the site.
 

adz

Moderator
Staff member
Nobody forgot to renew ssl but crazy domains f**ked it up.

We dont really need the encryption here, the only reason we have it is so the forum works in a facebook tab, it's a requirement for fb apps.

I'll have to sort it out during the week.
 

nearlyyellow

Well-Known Member
Firefox is telling me that the site is not secure again. Tells me that parts (such as an image) are not secure, ie. mixed content. Anyone else getting this notification? I have added a security exception to allow the site to load for me as per normal as I don't consider it high risk.
 

adz

Moderator
Staff member
There's a couple of issues here... firstly, the certificate hasn't been encrypted with a strong enough algorithm. Getting that sorted (hopefully) today. That one is a Crazy Domains f**k up.
Second, the mixed content message. This is because we are pushing all traffic through SSL now. Some pages will show a mixed (insecure) display content warning, as there are images loading on the page from other sources, e.g. imagur, photobucket, etc.
It's nothing to worry about but a bit of a pain, and a bit of a tricky one to fix, but hopefully will be sorted out soon.
 

adz

Moderator
Staff member
This has all just come up as I have been moving to a different server, away from a VPS, to Google App Engine (if that means anything to anyone ;))
Setup is a bit more tricky so having a few teething problems, but working on them.
 

adz

Moderator
Staff member
Adz , do I need to open this site in Incognito now?

(whatever that is.....)
No but like sydmariner said, incognito doesn't store any browsing history, so you might want to give that a try when you're looking at stuff you don't want anyone to know you were looking at ;)
 

Rowdy

Well-Known Member
No but like sydmariner said, incognito doesn't store any browsing history, so you might want to give that a try when you're looking at stuff you don't want anyone to know you were looking at ;)
So I should use that feature for my 'Judge Judy' porn?
 

adz

Moderator
Staff member
So I should use that feature for my 'Judge Judy' porn?
They do call it "porn mode" for a reason :D






And... after 3 weeks and narrowing it down to 1 new line and 1 modified line of code... we can post (non https) images again.






We were getting errors due to mixing our secure (https) site with non secure content, but that is fixed now by proxying - or basically making a copy of - the images to a secure server before displaying them.
Basically, blah blah blah it works.

 

Rowdy

Well-Known Member
They do call it "porn mode" for a reason ...
But what about uploading images directly via the 'upload a file' function ?

Just tried a 'Houso' image in the Xmas thread on the 'Other' board and it still shows as an attachment at the bottom of your post that you need to click on to actually see, rather than just show the image somewhere within your post automatically.(as it used to)

Uploaded the Houso image as it wouldnt allow me to embed directly from photobucket. (5 mins ago)
 
Top