Sprinter-Forum    
 

Go Back   Sprinter-Forum > Miscellaneous > Comments, Suggestions, & Problems with the Forum


 
Thread Tools Display Modes
Old 05-16-2019, 01:26 PM   #1
sparkplug
 
Join Date: Feb 2015
Location: UK
Posts: 358
Thanks: 66
Thanked 145 Times in 119 Posts
Default Certificate expired

I know it's not a biggie, but I just got a message warning me that the certificate for this site has expired.

Not really sure who to alert, so I'm hoping a post on here will find it's way to the right place!
__________________
MWB 2008 Mercedes Sprinter 311 CDi (UK RHD) in the faster DHL Yellow colour
sparkplug is offline   Reply With Quote
Old 05-16-2019, 01:42 PM   #2
caeppinger
 
Join Date: Apr 2010
Location: Illinois
Posts: 16
Thanks: 67
Thanked 3 Times in 2 Posts
Default Re: Certificate expired

What I get using Opera.

NET:ERR_CERT_DATE_INVALID
__________________
2008 3500 Itasca IQ24DL
caeppinger is offline   Reply With Quote
Old 05-16-2019, 01:49 PM   #3
mendonsy
Member
 
mendonsy's Avatar
 
Join Date: Jul 2009
Location: Mendon, NY
Posts: 1,766
Thanks: 577
Thanked 613 Times in 453 Posts
Default Re: Certificate expired

I also got a security warning this morning. It said the certificate expired at 7:50 AM today.
__________________
2006 Mercedes NAFTA 2500
140" hi roof ~200k miles
DAD
Bill's glow plug mod
My daughter's Pet Mobile
mendonsy is offline   Reply With Quote
Old 05-16-2019, 02:12 PM   #4
elemental
 
Join Date: Jul 2017
Location: USA PNW
Posts: 431
Thanks: 184
Thanked 273 Times in 184 Posts
Default Re: Certificate expired

The certificate currently presented by the site for TLS encryption was only valid from Feb 15 2019 to May 16, 2019; in my experience this is an abnormally short time for a TLS encryption certificate on a low-risk site. Short certificate lifetimes like this mean more administrative work renewing the certificate over the course of a year or five years.

Hopefully an administrator will be appraised of the situation so the certificate can be updated. The major downside of having to "click through" a warning about an expired certificate on a low-risk site is that it tends to encourage bad habits that eventually lead to someone clicking through a warning with serious consequences.

Many thanks to whoever performs the mostly thankless task of site/server administration...
__________________
--
2017 Sprinter 2500 170 Crew OM642 5-speed auto with Adventure Wagon interior&MOAB
elemental is online now   Reply With Quote
Old 05-16-2019, 02:21 PM   #5
Mickyfin
 
Mickyfin's Avatar
 
Join Date: Jul 2018
Location: Finland Europe
Posts: 880
Thanks: 1,060
Thanked 227 Times in 174 Posts
Default Re: Certificate expired

I just got a warning too.
Mickyfin is offline   Reply With Quote
Old 05-16-2019, 02:31 PM   #6
avanti
2014 GWV Legend 3500 I4
 
avanti's Avatar
 
Join Date: Sep 2006
Location: PA
Posts: 4,804
Thanks: 1,762
Thanked 3,049 Times in 1,865 Posts
Default Re: Certificate expired

There are no longer any "low risk" sites. Sophisticated attackers these days know very well how to exploit them. For example, it is not hard for a bot to scan for sites with expired certificates (at any given time there are many), and spoof the trusting user into ill-advised click-throughs, thinking they are just telling their OS to chill out.
__________________
--Pete
Formerly: 2005 Airstream Interstate (2500 T1N)
Now: 2014 Great West Vans Legend SE (3500 NCV3 I4)
avanti is offline   Reply With Quote
Old 05-16-2019, 03:17 PM   #7
az7000'
 
az7000''s Avatar
 
Join Date: Sep 2017
Location: Flagstaff, AZ or in Baja
Posts: 438
Thanks: 290
Thanked 179 Times in 126 Posts
Default Re: Certificate expired

Yeah, now I'm blocked from the site at work.... expired cert
__________________
2007 Itasca Navion 23J on a 2006 chassis. Resonator fix, Trik-L-Start, 51,000 miles (12,000 ours), 130w solar, crank up win guard, passenger seat swivel, HF 400w inverter.

O-ver-lan-ding = Let's see how much $h!t I can attach to my truck (van).

az7000' is offline   Reply With Quote
Old 05-16-2019, 08:32 PM   #8
sikwan
06 T1N Can
 
sikwan's Avatar
 
Join Date: Sep 2006
Location: San Jose, CA
Posts: 7,712
Thanks: 940
Thanked 1,843 Times in 843 Posts
Default Re: Certificate expired

Quote:
Originally Posted by elemental View Post
The certificate currently presented by the site for TLS encryption was only valid from Feb 15 2019 to May 16, 2019; in my experience this is an abnormally short time for a TLS encryption certificate on a low-risk site. Short certificate lifetimes like this mean more administrative work renewing the certificate over the course of a year or five years.

Let's Encrypt is the CA (Certificate Authority) and it's free, however, it's only for three months. Nearing the end of the three months, a script auto-renews the certificate. This time around the auto-renew script didn't push it through (for some reason).



I have no control over the autoscript or how it is programmed, otherwise, I would've looked into what the hiccup was.
sikwan is offline   Reply With Quote
The Following 2 Users Say Thank You to sikwan For This Useful Post:
Aqua Puttana (05-17-2019), elemental (05-17-2019)

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT. The time now is 07:24 AM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2019, vBulletin Solutions, Inc.