Expired security certificate

Chrome, just now:

You tell me, Google - does that time look right to you? Don’t you know what time it is?

Does anybody really know what time it is?
Does anybody really care?

:smiley:

Plus there’s the fact that it’s completely different people doing it this time than last. There’s been a complete change in leadership since last year at this time. I doubt it’s even the same tech people.

Sure, ideally they’d check the expiry when they took over. But I have a feeling that our admin is handling it herself, and she was kinda busy at that time. It’s entirely understandable that Tuba didn’t keep track of when the certificate would expire.

All this said, I don’t see any reason not to use Let’s Encrypt, which is both free and auto renews ever few months. Since Tuba was involved in handling the main site, I’m hoping she may have gotten a Let’s Encrypt certificate and made this a problem of the past.

I hadn’t thought of that, but you’re not wrong. Chrome could check the time with Google’s servers and thus be able to tell you if you clock is off by enough to have been the cause of the certificate error.

The old computer again – since I have it why not? But even with the Air I guess I’m more curious than annoyed; all this tech stuff still fascinates me. I know about the work-around for Chrome but my understanding is that it would basically cancel the certificate checks across the board and I still would like to be warned if I hit something like this somewhere other than the Dope. And at least Chrome has a slightly easy (at least in Catalina) way of saying I trust these folks and ignore for now. Safari is actually far worse; even after I did their version of that I had to reiterate it several times, do the whole computer log-in over and over and confirm I was actually me right up to closing it. In Chrome this is a basic papercut. In Safari its more like getting slashed across the back with a meat cleaver. I was always a little curious about why folks across the boards have been down on Safari the last 8 years or so - now I’m seeing why for myself.

I just got the similar error. I’m using a Win 10 machine with Firefox.

Tripler
Personally, I blame the Keebler elves.

Still doing it for me.

Problem definitely not fixed.

Yup, I have the warning Triangle next to the URL. Chrome isn’t happy that I insisted on connecting here.

Both Firefox and Opera on Windows 10 are still trying to keep me out. I lost a long rant when I tried to post because of all the warnings.

It happened to me again this morning. The one-day certificate from yesterday expired. Now when I check the certificate, it says it will expire tomorrow. The new certificate was issued by BitDefender, my antivirus/security software, not by the owner of SDMB. I guess it’s a feature of BitDefender to create a one-day certificate when I tell it to proceed despite an expired certificate.

It hasn’t yet been 24 hours since I first reported this problem. I’ll see what happens tomorrow.

I’ve been able to get past the expired certificate to read, but then the board eats my posts. Let’s see if I can get this one through…

Yeah, the product I support is used by a bunch of multinationals and government orgs, and we have a constant stream of tickets saying their cert expired and they need assistance updating it NOW! I kind of see it as a failure of their processes (we had automated notifications set up when I worked in hosting), but it’s far from an uncommon mistake. I see it all the time.

On top of that, you have to know all of the places you want to install the cert. I’ve helped more than one customer over the years track down where that request was being served from. Again, should be documented in your processes, but it’s not a rare situation for it not to be.

Let’s Encrypt is great, but you’ve got to be running in an environment that supports one of the clients. The product I support doesn’t support it, so it’s not an option for my customers.

So, yeah, not a stellar moment, but I have sympathy.

It’s working for me again using https.

From where I’m sitting the site is secure and the certificate expires January 10 2021.

I AM seeing “HTTPS.” in the web address bar. Is it possible that you are seeing “boards.straightdope.com” or some other variant? That would show as Not Secure and trigger warnings.

Would clearing cookies help? Please try that and see if tat helps.

Sorry for the troubles. I’m really really starting to hate weekends.

Jenny
your humble TubaDiva
Administrator

As one data point, my Chrome on Windows 10 now shows a legit certificate, issued by Avast Web/Mails Shield Root, valid until 01/11/2021. The site works again without getting the certificate warning. But in the website info area (left to the address bar), there’s still the red warning “not secure”. I edited the URL by hand and inserted https:, and the site opens, but the “not secure” warning remains. That may confuse Chrome users, but rather seems to be a Chrome issue than having anything to do with the new certificate.

And as a fellow IT guy, I feel ya ;). It always happens on the weekends/holidays.

ETA: wait, I just opened the board on a second tab, and the red “not secure” is gone. So for Chrome users who get it still, my advice: close all current tabs with the SDMB and open a new one, and it should go away. Maybe that applies to other browsers too.

Acting normally again today. Chrome on Windows 10.

Clock error resolved… finally. Still pisses me off that it kept saying my clock was wrong when it wasn’t. If it was an error due to the certificate expiring, then just say that, don’t blame the fucking clock.

Browser working normal.

Dopers still being abnormal.

Balance to the universe has returned.

:wink:

If you’re still getting ‘Not Secure’ messages, try clearing cookies. Worked for me just now.

Dopers still being abnormal.
If any of us was normal, would we be here?