search

FOSDEM / infrastructure

Infrastructure used during the conference
Other
54 stars 22 forks source link

Missing intermediate letsencrypt cert in nginx (was Infodesk Laptops Firefox complains about LetsEncrypt Certificates) #266

Closed bastischubert closed 1 year ago

bastischubert commented 4 years ago

While trying to use one of the Infodesk Laptops to access https://control.video.fosdem.org it refuses to connect SEC_ERROR_UNKNOWN_ISSUER - after updating Firefox esr to latest (apt update && apt upgrade) Problem still exists.

Why is this important: We need to connect to control.fosdem to check video and audio levels :/

RichiH commented 4 years ago

We are working on it and fix incoming in ~10m.

RichiH commented 4 years ago

Use FOSDEM-dualstack as a fallback for now

krokodilerian commented 4 years ago

@bastischubert can you retest?

bastischubert commented 4 years ago

infodesk laptop of us now working after importing the proper intermediate ca certs to the browser. seems like the control.video.fosdem.org server is miconfigured and does not toss out the intermediate certs

bastischubert commented 4 years ago

Use FOSDEM-dualstack as a fallback for now

we have a certificate unknown signer issue - nothing with the underlying network at all ;)

bastischubert commented 4 years ago

see https://www.ssllabs.com/ssltest/analyze.html?d=control.video.fosdem.org&s=185.175.218.11

krokodilerian commented 4 years ago

Found the issue, we were missing the intermediate cert (someone reported it to us). This was also the case for stream.fosdem.org, making a note to get that fixed on all certs in ansible before closing this.

krokodilerian commented 4 years ago

Apologies. @bastischubert was the one who reported it, it's here two messages up, and my head seems to be somewhat missing.