openframeworks / ofSite

openFrameworks web site
http://openframeworks.cc
159 stars 577 forks source link

Incomplete Certificate Chain #663

Open meiamsome opened 6 years ago

meiamsome commented 6 years ago

I believe this is the same as #649 - the certificate as provided is not trusted in some default configurations, because you do not provide the complete certificate chain, only the certificate which is for your site. You should be providing all the certificates of the chain up to the root certificate, which I believe means just prepending the Let's Encrypt X3 Intermediate certificate in this case

Please see the 'Additional Certificates' and 'Certification Paths' of the following website: https://www.ssllabs.com/ssltest/analyze.html?d=openframeworks.cc

vollstock commented 6 years ago

I have run into a problem with this, too. The installer on my Tooloop server (=Ubuntu) couldn’t download openframworks using wget. I thus had to ignore certificate checks completely.

Here is some more information on how to fix this in the Certbot Github repo.