Sprinter-Forum    
 

Go Back   Sprinter-Forum > Miscellaneous > Comments, Suggestions, & Problems with the Forum


 
Thread Tools Display Modes
Old 05-16-2019, 12:26 PM   #1
sparkplug
 
Join Date: Feb 2015
Location: UK
Posts: 182
Thanks: 42
Thanked 75 Times in 66 Posts
Default Certificate expired

I know it's not a biggie, but I just got a message warning me that the certificate for this site has expired.

Not really sure who to alert, so I'm hoping a post on here will find it's way to the right place!
__________________
MWB 2008 Mercedes Sprinter 311 CDi (UK RHD) in the faster DHL Yellow colour
sparkplug is offline   Reply With Quote
Old 05-16-2019, 12:42 PM   #2
caeppinger
 
Join Date: Apr 2010
Location: Illinois
Posts: 13
Thanks: 50
Thanked 1 Time in 1 Post
Default Re: Certificate expired

What I get using Opera.

NET:ERR_CERT_DATE_INVALID
__________________
2008 3500 Itasca IQ24DL
caeppinger is offline   Reply With Quote
Old 05-16-2019, 12:49 PM   #3
mendonsy
Member
 
mendonsy's Avatar
 
Join Date: Jul 2009
Location: Mendon, NY
Posts: 1,767
Thanks: 577
Thanked 605 Times in 447 Posts
Default Re: Certificate expired

I also got a security warning this morning. It said the certificate expired at 7:50 AM today.
__________________
2006 Mercedes NAFTA 2500
140" hi roof ~200k miles
DAD
Bill's glow plug mod
My daughter's Pet Mobile
mendonsy is offline   Reply With Quote
Old 05-16-2019, 01:12 PM   #4
elemental
 
Join Date: Jul 2017
Location: USA PNW
Posts: 209
Thanks: 99
Thanked 150 Times in 96 Posts
Default Re: Certificate expired

The certificate currently presented by the site for TLS encryption was only valid from Feb 15 2019 to May 16, 2019; in my experience this is an abnormally short time for a TLS encryption certificate on a low-risk site. Short certificate lifetimes like this mean more administrative work renewing the certificate over the course of a year or five years.

Hopefully an administrator will be appraised of the situation so the certificate can be updated. The major downside of having to "click through" a warning about an expired certificate on a low-risk site is that it tends to encourage bad habits that eventually lead to someone clicking through a warning with serious consequences.

Many thanks to whoever performs the mostly thankless task of site/server administration...
__________________
--
2017 Sprinter 2500 170 Crew OM642 5-speed auto with Adventure Wagon interior&MOAB
elemental is offline   Reply With Quote
Old 05-16-2019, 01:21 PM   #5
Mickyfin
 
Mickyfin's Avatar
 
Join Date: Jul 2018
Location: Finland Europe
Posts: 663
Thanks: 794
Thanked 145 Times in 121 Posts
Default Re: Certificate expired

I just got a warning too.
Mickyfin is offline   Reply With Quote
Old 05-16-2019, 01:31 PM   #6
avanti
2014 GWV Legend 3500 I4
 
avanti's Avatar
 
Join Date: Sep 2006
Location: PA
Posts: 4,466
Thanks: 1,627
Thanked 2,825 Times in 1,718 Posts
Default Re: Certificate expired

There are no longer any "low risk" sites. Sophisticated attackers these days know very well how to exploit them. For example, it is not hard for a bot to scan for sites with expired certificates (at any given time there are many), and spoof the trusting user into ill-advised click-throughs, thinking they are just telling their OS to chill out.
__________________
--Pete
Formerly: 2005 Airstream Interstate (2500 T1N)
Now: 2014 Great West Vans Legend SE (3500 NCV3 I4)
avanti is offline   Reply With Quote
Old 05-16-2019, 02:17 PM   #7
az7000'
 
az7000''s Avatar
 
Join Date: Sep 2017
Location: Flagstaff, AZ or in Baja
Posts: 324
Thanks: 225
Thanked 120 Times in 84 Posts
Default Re: Certificate expired

Yeah, now I'm blocked from the site at work.... expired cert
__________________
2007 Itasca Navion 23J on a 2006 chassis. Resonator fix, Trik-L-Start, 51,000 miles (12,000 ours), 130w solar, crank up win guard, passenger seat swivel, HF 400w inverter.

O-ver-lan-ding = Let's see how much $h!t I can attach to my truck (van).

az7000' is offline   Reply With Quote
Old 05-16-2019, 07:32 PM   #8
sikwan
06 T1N Can
 
sikwan's Avatar
 
Join Date: Sep 2006
Location: San Jose, CA
Posts: 7,670
Thanks: 919
Thanked 1,795 Times in 828 Posts
Default Re: Certificate expired

Quote:
Originally Posted by elemental View Post
The certificate currently presented by the site for TLS encryption was only valid from Feb 15 2019 to May 16, 2019; in my experience this is an abnormally short time for a TLS encryption certificate on a low-risk site. Short certificate lifetimes like this mean more administrative work renewing the certificate over the course of a year or five years.

Let's Encrypt is the CA (Certificate Authority) and it's free, however, it's only for three months. Nearing the end of the three months, a script auto-renews the certificate. This time around the auto-renew script didn't push it through (for some reason).



I have no control over the autoscript or how it is programmed, otherwise, I would've looked into what the hiccup was.
sikwan is offline   Reply With Quote
The Following 2 Users Say Thank You to sikwan For This Useful Post:
Aqua Puttana (05-16-2019), elemental (05-17-2019)

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



All times are GMT. The time now is 09:58 PM.


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2019, vBulletin Solutions, Inc.