Certificate Domain stuff?

How can I make this site better? Let me know what you'd like to see!

Moderators: MattKingUSA, khz

ssj71
Established Member
Posts: 1294
Joined: Tue Sep 25, 2012 6:36 pm
Has thanked: 1 time

Certificate Domain stuff?

Post by ssj71 »

I know little of such things, but when loading the page today I got this from firefox (ff v47.0):

Your connection is not secure

The owner of linuxmusicians.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Learn more…

linuxmusicians.com uses an invalid security certificate.

The certificate is only valid for the following names:
*.grus.uberspace.de, grus.uberspace.de

Error code: SSL_ERROR_BAD_CERT_DOMAIN


I trust you guys, but I think it would be good to resolve this.
_ssj71

music: https://soundcloud.com/ssj71
My plugins are Infamous! http://ssj71.github.io/infamousPlugins
I just want to get back to making music!
User avatar
magicalex
Established Member
Posts: 193
Joined: Sun Jan 24, 2016 6:34 pm
Has thanked: 129 times
Been thanked: 7 times
Contact:

Re: Certificate Domain stuff?

Post by magicalex »

I get the same message on chrome.
Luc
Established Member
Posts: 741
Joined: Fri Mar 27, 2015 1:04 pm
Been thanked: 1 time

Re: Certificate Domain stuff?

Post by Luc »

Same here.
User avatar
GraysonPeddie
Established Member
Posts: 657
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Been thanked: 6 times
Contact:

Re: Certificate Domain stuff?

Post by GraysonPeddie »

I went into LM website...
Your connection is not private...
Went into the Suggestions forum...
Your connection is not private...
Saw the certificate thread...
Your connection is not private...
Begins to post into a topic...
Your connection is not private...
Types a post and submits my post...
Your connection is not private...
Post submission successful...
Your connection is not private...
Back to the thread and done. Goes to check in other forums...
Your connection is not private...

Chromium, will you shut the hell up!? :( LOL!!!

So I am editing my post...
Your connection is not private...
Emoji's have not been migrated over. And I actually did not see a "your post has submitted successfully" message...
Your connection is not private...
UGH!!!
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.
User avatar
sadko4u
Established Member
Posts: 986
Joined: Mon Sep 28, 2015 9:03 pm
Has thanked: 2 times
Been thanked: 359 times

Re: Certificate Domain stuff?

Post by sadko4u »

Getting error too:
linuxmusicians.com uses an invalid security certificate. The certificate is only valid for the following names: *.grus.uberspace.de, grus.uberspace.de Error code: SSL_ERROR_BAD_CERT_DOMAIN
LSP (Linux Studio Plugins) Developer and Maintainer.
folderol
Established Member
Posts: 2069
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Has thanked: 224 times
Been thanked: 400 times
Contact:

Re: Certificate Domain stuff?

Post by folderol »

At the risk of getting boring, I've got the same message :(
The Yoshimi guy {apparently now an 'elderly'}
User avatar
GraysonPeddie
Established Member
Posts: 657
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Been thanked: 6 times
Contact:

Re: Certificate Domain stuff?

Post by GraysonPeddie »

I'm going to ignore certificate warnings in the future, including other websites. If people are using self-signed certificates in other websites, I don't mind.

Yes, it's dangerous and there can be a possibility for a man-in-the-middle attack, but so what? I just don't care to heed certificate warnings anymore. It makes me insist that my connection is always private and I will continue to insist from now on.
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.
tux99
Established Member
Posts: 346
Joined: Fri Sep 28, 2012 10:42 am
Contact:

Re: Certificate Domain stuff?

Post by tux99 »

To the admins of this site:

Can you please disable the encryption, if you can't fix the certificate domain name mismatch?

The way it is now it doesn't add any security (as the security certificate is unverified for this domain name, therefore wide open to MITM attacks), and it just gets people used to clicking away security warnings without reading them, i.e. it promotes unsafe behaviour.

Thanks.


P.S: is there actually anybody in charge for this site or has it been abandoned to itself?
(I mean an admin, as mods don't have the power to fix tihs)
User avatar
GraysonPeddie
Established Member
Posts: 657
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Been thanked: 6 times
Contact:

Re: Certificate Domain stuff?

Post by GraysonPeddie »

Due to the certificate error, Chromium won't automatically fill in username and password, so I had to use KeePass2 for that.

Thanks LinuxMusicians for logging me out despite that I did not click in "Log out." How do I know when the cookie expire?
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.
Spanner
Established Member
Posts: 76
Joined: Mon Mar 10, 2014 8:18 pm
Been thanked: 2 times

Re: Certificate Domain stuff?

Post by Spanner »

Why not fix this:
Your connection is not secure

The owner of linuxmusicians.com has configured their website improperly. To protect your information from being stolen, [your] browser has not connected to this website.

linuxmusicians.com uses an invalid security certificate.


The certificate is only valid for the following names: *.grus.uberspace.de, grus.uberspace.de


Error code: SSL_ERROR_BAD_CERT_DOMAIN

?
User avatar
GraysonPeddie
Established Member
Posts: 657
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Been thanked: 6 times
Contact:

Re: Certificate Domain stuff?

Post by GraysonPeddie »

Still waiting for someone to fix the site with certificate error. It's been a week...
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.
tnovelli
Established Member
Posts: 277
Joined: Wed Apr 20, 2011 4:52 pm

Re: Certificate Domain stuff?

Post by tnovelli »

Same here. I'll come back when they get a valid cert or turn SSL back off.
folderol
Established Member
Posts: 2069
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Has thanked: 224 times
Been thanked: 400 times
Contact:

Re: Certificate Domain stuff?

Post by folderol »

I confess I'm surprised there has been no response at all. Even "Sorry guys were looking at it" would help.
The Yoshimi guy {apparently now an 'elderly'}
User avatar
GraysonPeddie
Established Member
Posts: 657
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Been thanked: 6 times
Contact:

Re: Certificate Domain stuff?

Post by GraysonPeddie »

Here's an article about people ignoring certificate warnings: http://www.cnet.com/news/web-users-igno ... -warnings/

Even I would ignore self-signed certificates. :) Besides, it's just not effective anymore.
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.
User avatar
raboof
Established Member
Posts: 1855
Joined: Tue Apr 08, 2008 11:58 am
Location: Deventer, NL
Has thanked: 50 times
Been thanked: 74 times
Contact:

Re: Certificate Domain stuff?

Post by raboof »

tux99 wrote:Can you please disable the encryption, if you can't fix the certificate domain name mismatch?
Even better, I fixed the SSL configuration :).
tux99 wrote:The way it is now it doesn't add any security (as the security certificate is unverified for this domain name, therefore wide open to MITM attacks)
Actually arguably it still protects against passive attackers, but indeed...
tux99 wrote:it just gets people used to clicking away security warnings without reading them, i.e. it promotes unsafe behaviour.
This is a real issue and
tux99 wrote:is there actually anybody in charge for this site or has it been abandoned to itself?
That'd be me... but unfortunately though I was aware of the issue I was on the road and didn't have access to the proper credentials to fix the issue :(.

I agree I should've clarified in his thread, though, sorry.

All should be good now again, let me know if it isn't!
Post Reply