[Info-vax] forum.vmssoftware.com/

[Chris Townley]

On 11/09/2023 11:17, Neil Rieck wrote:
> On Monday, September 11, 2023 at 5:48:03 AM UTC-4, Jan-Erik Söderholm wrote:
>> Den 2023-09-11 kl. 10:02, skrev David Wade:
>>> On 11/09/2023 03:34, Arne Vajhøj wrote:
>>>> On 9/10/2023 9:56 PM, Arne Vajhøj wrote:
>>>>> There is something going on with that site.
>>>>>
>>>>> I tried again.
>>>>>
>>>>> FF gives cert revoked every time now.
>>>>>
>>>>> Chrome works. And say that cert expire Tuesday, September 19, 2023 at
>>>>> 7:59:59 PM.
>>>>
>>>> I tried via work.
>>>>
>>>> Chrome works.
>>>>
>>>> FF does not work but gives a different error:
>>>>
>>>> "Bad Server Certificate" and certificate expiration is 11-Nov-2284 07:08:23.
>>>>
>>>> WTF??
>>>>
>>>> Arne
>>>>
>>>>
>>> Every certificate contains a URL for a certificate revocation list (CRL).
>>> So if a certificate is compromised, for example because its private key is
>>> stolen, it can be revoked.
>>>
>>> What you are seeing is the fact that Chrome and Edge don't check the CRL
>>> but FF does
>>>
>>> Dave
>> The page https://forum.vmssoftware.com/ opens just fine for me.
>> And I can read entries in the forum (the "Last VSCode..." post).
>>
>> When clicking "Login" at the top right, I get the login page.
>> But when clicking the Login button on the login page, it just hangs.
>>
>> Win11 and the latest FF.
>>
>> FWIW...
>>
>> Jan-Erik.
> 
> The good folks at VSI might have been changing things -BUT- still have a potential problem.
> 
> As of 2023-09-11 (6:07 EDT)
> 
> This site: https://vmssoftware.com/
> uses a certificate with an issue date of Sept-06, 2023 and employs a common name of "vmssoftware.com"
> (no problem here)
> 
> This site: https://forum.vmssoftware.com/
> uses a wildcard certificate with an issue date of Sept-18, 2022 and employs a common name of "*.vmssoftware.com"
> (will expire on Sept-19, 2023)
> 
> Neil Rieck
> Waterloo, Ontario, Canada.
> http://neilrieck.net/OpenVMS.html

Acknowledged on the forum:

Thank you for reporting the issue. We already know about it and hope to 
have it fixed by the end of the day. We will let everyone know once we 
are done.

Thank you,

VSI Website Support Team

Chris

-- 
Chris