search

alanshaw / david

:eyeglasses: Node.js module that tells you when your package npm dependencies are out of date.
https://david-dm.org
MIT License
969 stars 70 forks source link

david-dm.org TLS certificate distrusted in Firefox Nightly #141

Closed edmorley closed 6 years ago

edmorley commented 6 years ago

Visiting https://david-dm.org/ in Firefox Nightly fails with a "Your connection is not secure" error.

Your connection is not secure

The owner of david-dm.org has configured their web site improperly. To protect your information from being stolen, Nightly has not connected to this web site.

...

david-dm.org uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported. Error code: SEC_ERROR_UNKNOWN_ISSUER

Checking the cert using https://www.ssllabs.com/ssltest/analyze.html?d=david-dm.org shows:

This server's certificate will be distrusted by Google and Mozilla from March 2018.

...which links to: https://blog.qualys.com/ssllabs/2017/09/26/google-and-mozilla-deprecating-existing-symantec-certificates

So presuming Firefox Nightly has already made that switch, in readiness for the release in March - and so david-dm.org will need a new cert?

alanshaw commented 6 years ago

Thanks for reporting - the cert actually expires on March 8th so I'll make sure I renew before the end of the month

edmorley commented 6 years ago

I don't know what your thoughts are about Let's Encrypt, but perhaps worth considering switching to it at the same time? :-) https://certbot.eff.org/#ubuntutrusty-nginx

alanshaw commented 6 years ago

yeah that was my plan ;)

edmorley commented 6 years ago

Now resolved - thank you :-)