search

tobiasschlagenhaufer / cuScheduling

Schedule Generator for University of Carleton Students
MIT License
4 stars 1 forks source link

Certificate misconfiguration #10

Open samuel-gamelin opened 4 years ago

samuel-gamelin commented 4 years ago

The certificate currently being used for the website is not valid for its www subdomain (www.cuscheduling.net).

tobiasschlagenhaufer commented 4 years ago

Could you give more info? What certificate?

samuel-gamelin commented 4 years ago

This refers to the SSL certificate installed on the cuscheduling.net website.

In the README, the website is addressed using its www subdomain (www.cuscheduling.net). Upon visiting the website on Safari on macOS, the following occurs:

Screen Shot 2020-06-28 at 12 00 39 PM

This does not appear to be an issue on Chrome as www.cuscheduling.net is automatically redirected to https://cuscheduling.net/. However, the issue can be forced by visiting the FQDN: www.cuscheduling.net..

tobiasschlagenhaufer commented 4 years ago

Yes I do see that now... thanks for bringing that up. Its something I can look into, any idea why the FQDN wouldn't be configured but the common name works?

samuel-gamelin commented 4 years ago

From what I'm seeing, this is because the certificate does not have www.cuscheduling.net in its list of alternative names - https://observatory.mozilla.org/analyze/cuscheduling.net#tls. Creating a new certificate with www.cuscheduling.net in the list of subject alternative names would resolve the issue. Another possibility is to replace the references to www.cuscheduling.net in the README with references to cuscheduling.net instead, so as to avoid confusion.