[Info-vax] forum.vmssoftware.com/

[Neil Rieck]

On Monday, September 11, 2023 at 5:48:03 AM UTC-4, Jan-Erik Söderholm wrote:
> Den 2023-09-11 kl. 10:02, skrev David Wade: 
> > On 11/09/2023 03:34, Arne Vajhøj wrote: 
> >> On 9/10/2023 9:56 PM, Arne Vajhøj wrote: 
> >>> There is something going on with that site. 
> >>> 
> >>> I tried again. 
> >>> 
> >>> FF gives cert revoked every time now. 
> >>> 
> >>> Chrome works. And say that cert expire Tuesday, September 19, 2023 at 
> >>> 7:59:59 PM. 
> >> 
> >> I tried via work. 
> >> 
> >> Chrome works. 
> >> 
> >> FF does not work but gives a different error: 
> >> 
> >> "Bad Server Certificate" and certificate expiration is 11-Nov-2284 07:08:23. 
> >> 
> >> WTF?? 
> >> 
> >> Arne 
> >> 
> >> 
> > Every certificate contains a URL for a certificate revocation list (CRL). 
> > So if a certificate is compromised, for example because its private key is 
> > stolen, it can be revoked. 
> > 
> > What you are seeing is the fact that Chrome and Edge don't check the CRL 
> > but FF does 
> > 
> > Dave
> The page https://forum.vmssoftware.com/ opens just fine for me. 
> And I can read entries in the forum (the "Last VSCode..." post). 
> 
> When clicking "Login" at the top right, I get the login page. 
> But when clicking the Login button on the login page, it just hangs. 
> 
> Win11 and the latest FF. 
> 
> FWIW... 
> 
> Jan-Erik.

The good folks at VSI might have been changing things -BUT- still have a potential problem.

As of 2023-09-11 (6:07 EDT)

This site: https://vmssoftware.com/ 
uses a certificate with an issue date of Sept-06, 2023 and employs a common name of "vmssoftware.com"
(no problem here)

This site: https://forum.vmssoftware.com/ 
uses a wildcard certificate with an issue date of Sept-18, 2022 and employs a common name of "*.vmssoftware.com"
(will expire on Sept-19, 2023)

Neil Rieck
Waterloo, Ontario, Canada.
http://neilrieck.net/OpenVMS.html