Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Silverwing235]

....As in, front door is broken, so you need to go in round the back, for example.

[lethosor]

I'm not sure what you mean. Both of those links work for me. Maybe your browser is complaining about the lack of HTTPS? Can you provide a more specific message?

[Silverwing235]

....I take it you mean, other than "Your connection is not secure. The administrator of dwarffortresswiki has configured their website improperly" when trying to access the main page every once in a while? Not really, no, at least not for now. My apologies, nonetheless. 

[lethosor]

Your connection is not secure. The administrator of dwarffortresswiki has configured their website improperly

This is exactly what I was asking for. I've never seen that before, but I use Chrome. Chrome provides a "not secure" indicator in the address bar when I'm on a page with a password field, but otherwise it just provides a "(i)" in the address bar to indicate HTTP. Google sometimes experiments with showing different indicators to different people, but in any case, the two pages that you linked look identical to me in terms of browser UI (of course, the content is different). I have almost no idea why you would only see that sometimes on the main page - if it were consistent, my guess would be a password field, but there isn't one on that page. Are you using an ad blocker, or other content-affecting extension?

[Silverwing235]

...Usually(ads being ads, those days) but for this wiki, no. Firefox would seem to be a lot more adept than Chrome at detecting expired security-certificate shenanigans (May or so, by the look of it) for logged-out Firefox users, which seems to be the problem here. 

[lethosor]

The wiki doesn't use HTTPS, so it can't have an expired certificate.

[Silverwing235]

The wiki doesn't use HTTPS, so it can't have an expired certificate.

That may be the case, but Firefox disagrees:

dwarffortresswiki.org uses an invalid security certificate. The certificate expired on 02 May 2018, 00:59. The current time is 27 June 2018, 17:48. Error code: SEC_ERROR_EXPIRED_CERTIFICATE

[lethosor]

Firefox is entirely wrong, then. I don't even see a certificate listed in Chrome.
Edit: we used HTTPS briefly in 2014 or 2015 or so (less than a week). Maybe Firefox is picking up that certificate somehow? It shouldn't be served by the wiki, in any case, and it should have expired more than a month ago.

[DwarfToys]

It just tells me that the site isn't https if I go to the default link. 

If you go to the https page manually or via a link, it would appear that the HTTPS port is still open and the browser will throw the Insecure connection screen...

Issued to: 
CN = dwarffortresswiki.org
OU = PositiveSSL
OU = Domain Control Validated
SN = 00:E1:70:67:7B:05:AD:10:6F:5D:E4:F8:DB:66:E9:81:64

Issuer:
CN = COMODO RSA Domain Validation Secure Server CA
O = COMODO CA Limited
L = Salford
ST = Greater Manchester
C = GB

Validity:
Not before = Wednesday, April 29, 2015, 7:00:00 PM
(Thursday, April 30, 2015, 12:00:00 AM GMT)
Not after = Tuesday, May 1, 2018, 6:59:59 PM
(Tuesday, May 1, 2018, 11:59:59 PM GMT)

FYI.

[lethosor]

The HTTPS port is still open because it's a redirect to the HTTP site (or at least it was). You're correct that the certificate is expired, but that's because nobody should be accessing the HTTPS site anymore, since it doesn't even do anything.

Once we do get HTTPS set up (which I think Locriani is working on), you'll want to use that, of course, but not now.

[DwarfToys]

Yeah,  I don't consider this a site issue really because it is hard to make it happen normally.  I was just pointing out that an expired cert is there, but you have to go looking for it. 

[lethosor]

We're not using HTTPS, so we don't need a valid certificate right now. I'm honestly surprised it lasted this long, assuming the May 1, 2018 date is correct.