Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

Thomas Morton - where are you? You're needed again!

Gordo

On 11/10/16 21:07, Richard Nevell wrote:
> Thank you!
> 
> On 11 October 2016 at 21:02, Thomas Morton <
> > wrote:
> 
> Cracked it! Man that was complicated; got stuff in the right order.
> Just running updates now.
> 
> T
> 
> On Tue, 11 Oct 2016 at 09:30 Thomas Morton
> >
> wrote:
> 
> Eek! That's not good.
> 
> 
> I've been testing different things but nothing is working with
> FireFox. This Chrome one is new :/ I'll take a look tonight with
> a priority.
> 
> 
> T
> 
> 
> 
> On Tue, 11 Oct 2016 09:24 ,  > wrote:
> 
> __
> 
>
> 
> Hi all,
> 
> I tried using Chrome as an alternative browser but
> experienced problems with that as well.
> 
> all the best
> 
> Fabian
> 
> aka Leutha
> 
> On 08 October 2016 at 16:21 Gordon Joly
> >
> wrote:
> 
> The Qualys SSL checker:
> 
> 
> https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk
> 
> 
> 
> is less than happy about the site, granting it only
> a grade C for both
> the IPv4 and IPv6 configurations. See the reports
> generated there for a
> whole bunch of warnings regarding potential
> vulnerabilities and other
> technical glitches regarding both the certificate
> and server configuration.
> 
> Neil
> 
> "This server is vulnerable to the POODLE attack. If
> possible, disable
> SSL 3 to mitigate. Grade capped to C."
> 
> Any chance that WMUK can fix the server?
> 
> Gordo
> 
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> 
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> 
> WMUK: https://wikimedia.org.uk
> 
> 
> 
> ___
> 
> Wikimedia UK mailing list
> 
> wikimediau...@wikimedia.org 
> 
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> 
> 
> WMUK: https://wikimedia.org.uk
> 
> 
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org 
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> 
> WMUK: https://wikimedia.org.uk
> 
> 
> 
> 
> -- 
> Richard Nevell
> Project Coordinator
> Wikimedia UK
> +44 (0) 20 7065 0921
> 
> Wikimedia UK is a Company Limited by Guarantee registered in England and
> Wales, Registered No. 6741827. Registered Charity No.1144513. Registered
> Office 4th Floor, Development House, 56-64 Leonard Street, London EC2A
> 4LT. United Kingdom. Wikimedia UK is the UK chapter of a global
> Wikimedia movement. The Wikimedia projects are run by the Wikimedia
> Foundation (who operate Wikipedia, amongst other projects).
> 
> *Wikimedia UK is an independent non-profit charity with no legal control
> over Wikipedia nor responsibility for its contents.*
> 
> 
> 
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
> 


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Richard Nevell]

Thank you!

On 11 October 2016 at 21:02, Thomas Morton 
wrote:

> Cracked it! Man that was complicated; got stuff in the right order. Just
> running updates now.
>
> T
>
> On Tue, 11 Oct 2016 at 09:30 Thomas Morton 
> wrote:
>
> Eek! That's not good.
>
> I've been testing different things but nothing is working with FireFox.
> This Chrome one is new :/ I'll take a look tonight with a priority.
>
> T
>
>
> On Tue, 11 Oct 2016 09:24 ,  wrote:
>
>
>
>
>
> Hi all,
>
> I tried using Chrome as an alternative browser but experienced problems
> with that as well.
>
> all the best
>
> Fabian
>
> aka Leutha
>
> On 08 October 2016 at 16:21 Gordon Joly  wrote:
>
> The Qualys SSL checker:
>
> https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk
>
> is less than happy about the site, granting it only a grade C for both
> the IPv4 and IPv6 configurations. See the reports generated there for a
> whole bunch of warnings regarding potential vulnerabilities and other
> technical glitches regarding both the certificate and server configuration.
>
> Neil
>
> "This server is vulnerable to the POODLE attack. If possible, disable
> SSL 3 to mitigate. Grade capped to C."
>
> Any chance that WMUK can fix the server?
>
> Gordo
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
>
>
>
> ___
>
> Wikimedia UK mailing list
>
> wikimediau...@wikimedia.org
>
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
>
> WMUK: https://wikimedia.org.uk
>
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
>



-- 
Richard Nevell
Project Coordinator
Wikimedia UK
+44 (0) 20 7065 0921

Wikimedia UK is a Company Limited by Guarantee registered in England and
Wales, Registered No. 6741827. Registered Charity No.1144513. Registered
Office 4th Floor, Development House, 56-64 Leonard Street, London EC2A 4LT.
United Kingdom. Wikimedia UK is the UK chapter of a global Wikimedia
movement. The Wikimedia projects are run by the Wikimedia Foundation (who
operate Wikipedia, amongst other projects).

*Wikimedia UK is an independent non-profit charity with no legal control
over Wikipedia nor responsibility for its contents.*
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Thomas Morton]

Cracked it! Man that was complicated; got stuff in the right order. Just
running updates now.

T

On Tue, 11 Oct 2016 at 09:30 Thomas Morton 
wrote:

Eek! That's not good.

I've been testing different things but nothing is working with FireFox.
This Chrome one is new :/ I'll take a look tonight with a priority.

T


On Tue, 11 Oct 2016 09:24 ,  wrote:





Hi all,

I tried using Chrome as an alternative browser but experienced problems
with that as well.

all the best

Fabian

aka Leutha

On 08 October 2016 at 16:21 Gordon Joly  wrote:

The Qualys SSL checker:

https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk

is less than happy about the site, granting it only a grade C for both
the IPv4 and IPv6 configurations. See the reports generated there for a
whole bunch of warnings regarding potential vulnerabilities and other
technical glitches regarding both the certificate and server configuration.

Neil

"This server is vulnerable to the POODLE attack. If possible, disable
SSL 3 to mitigate. Grade capped to C."

Any chance that WMUK can fix the server?

Gordo

___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk



___

Wikimedia UK mailing list

wikimediau...@wikimedia.org

https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l

WMUK: https://wikimedia.org.uk
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Thomas Morton]

Eek! That's not good.

I've been testing different things but nothing is working with FireFox.
This Chrome one is new :/ I'll take a look tonight with a priority.

T

On Tue, 11 Oct 2016 09:24 ,  wrote:

> Hi all,
>
> I tried using Chrome as an alternative browser but experienced problems
> with that as well.
>
> all the best
>
> Fabian
>
> aka Leutha
>
> On 08 October 2016 at 16:21 Gordon Joly  wrote:
>
> The Qualys SSL checker:
>
> https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk
>
> is less than happy about the site, granting it only a grade C for both
> the IPv4 and IPv6 configurations. See the reports generated there for a
> whole bunch of warnings regarding potential vulnerabilities and other
> technical glitches regarding both the certificate and server configuration.
>
> Neil
>
> "This server is vulnerable to the POODLE attack. If possible, disable
> SSL 3 to mitigate. Grade capped to C."
>
> Any chance that WMUK can fix the server?
>
> Gordo
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[leutha]

Hi all,I tried using Chrome as an alternative browser but experienced problems with that as well.all the bestFabianaka LeuthaOn 08 October 2016 at 16:21 Gordon Joly  wrote:The Qualys SSL checker:https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.ukis less than happy about the site, granting it only a grade C for boththe IPv4 and IPv6 configurations. See the reports generated there for awhole bunch of warnings regarding potential vulnerabilities and othertechnical glitches regarding both the certificate and server configuration.Neil"This server is vulnerable to the POODLE attack. If possible, disableSSL 3 to mitigate. Grade capped to C."Any chance that WMUK can fix the server?Gordo___Wikimedia UK mailing listwikimediau...@wikimedia.orghttps://lists.wikimedia.org/mailman/listinfo/wikimediauk-lWMUK: https://wikimedia.org.uk

___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

> 
> The Qualys SSL checker:
> 
> https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk
> 
> is less than happy about the site, granting it only a grade C for both
> the IPv4 and IPv6 configurations. See the reports generated there for a
> whole bunch of warnings regarding potential vulnerabilities and other
> technical glitches regarding both the certificate and server configuration.
> 
> Neil
> 
> 

"This server is vulnerable to the POODLE attack. If possible, disable
SSL 3 to mitigate. Grade capped to C."

Any chance that WMUK can fix the server?

Gordo


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Neil Harris]

On 02/10/16 17:50, Gordon Joly wrote:



https://wikimedia.org.uk/

I belief that problem with Firefox is extant.

Gordo




The Qualys SSL checker:

https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk

is less than happy about the site, granting it only a grade C for both 
the IPv4 and IPv6 configurations. See the reports generated there for a 
whole bunch of warnings regarding potential vulnerabilities and other 
technical glitches regarding both the certificate and server configuration.


Neil


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Lester Caine]

On 22/09/16 15:11, Gordon Joly wrote:
> On 22/09/16 14:10, Lester Caine wrote:
>> > When the certificate needs renewing , letsencrypt is
>> > worth a look as it's free and can be configured to automatically refresh
>> > it's certificates.
> 
> Interesting.
> 
> https://letsencrypt.org/
> 
> I have used STARTTLS...
> 
> But this seems also to have a problem?
> 
> https://www.starttls.info/
> 
> This site uses "Let's Encrypt Authority X3"

Bit off base for here, but https://starttls.info/
The warning on Firefox explained that only starttls.info is supported.

I dropped the www. on all the sites I support, and just forward www.* to
the main domain, looks like that is missing for starttls.info.

-- 
Lester Caine - G8HFL
-
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 22/09/16 14:10, Lester Caine wrote:
> When the certificate needs renewing , letsencrypt is
> worth a look as it's free and can be configured to automatically refresh
> it's certificates.


Interesting.

https://letsencrypt.org/

I have used STARTTLS...

But this seems also to have a problem?

https://www.starttls.info/

This site uses "Let's Encrypt Authority X3"

Gordo


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Lester Caine]

On 22/09/16 10:37, Gordon Joly wrote:
>> Thanks Tom! It confused me as well...
> Can I perhaps shed some light? Firefox is now complaining about some
> other sites, so perhaps the fault is with Firefox?
> 
> I run Firefox 48.0 on Linux Mint 17.3

Site is looking fine from here - on Firefox. I AM having a problem with
Firefox on a couple of sites where we now have letsencrypt certificates
on the main sites, but some sub domains are still http:// ... Firefox
now complains that the certificate is wrong while the setup works fine
on other browsers. When the certificate needs renewing , letsencrypt is
worth a look as it's free and can be configured to automatically refresh
it's certificates.

-- 
Lester Caine - G8HFL
-
Contact - http://lsces.co.uk/wiki/?page=contact
L.S.Caine Electronic Services - http://lsces.co.uk
EnquirySolve - http://enquirysolve.com/
Model Engineers Digital Workshop - http://medw.co.uk
Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 22/09/16 10:37, Gordon Joly wrote:
> On 21/09/16 11:17, Lucy Crompton-Reid wrote:
>> Thanks Tom! It confused me as well...
> 
> Can I perhaps shed some light? Firefox is now complaining about some
> other sites, so perhaps the fault is with Firefox?
> 
> I run Firefox 48.0 on Linux Mint 17.3
> 
> Gordo
> 
> 
> 
> ___



Maybe not. Looks like the site I just visited has an expired certificate!

:-(

Gordo


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 21/09/16 11:17, Lucy Crompton-Reid wrote:
> Thanks Tom! It confused me as well...

Can I perhaps shed some light? Firefox is now complaining about some
other sites, so perhaps the fault is with Firefox?

I run Firefox 48.0 on Linux Mint 17.3

Gordo



___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Thomas Morton]

Hey all,

So the error message doesn't fit with the facts; its complaining about
missing a certificate but then shows it in the error detail.

I'm working on this, trying different things to resolve. Bear with for a
day or so more :) sorry!

T

On Wed, 21 Sep 2016 09:29 Gordon Joly,  wrote:

>
> Any update on when this will be fixed?
>
> Many thanks,
>
> Gordon
>
>
> On 15/09/16 13:10, Lucy Crompton-Reid wrote:
> > Hi Gordo (and all)
> >
> > We have successfully purchased a new SSL certificate (for three years)
> > and I believe one of our developers was installing it yesterday, so I'm
> > not sure exactly what's happened here. Will investigate but the person
> > dealing with this is taking a few days off for his birthday so it may
> > take a few days for us to get back to you/resolve any issues, sorry.
> >
> > Lucy
> >
> >
> > On 15 September 2016 at 13:04, Gordon Joly  > > wrote:
> >
> > On 15/09/16 12:59, Katie Chan wrote:
> > > Firefox (Win & Linux) & https://wikimedia.org.uk/ results in a
> > > SEC_ERROR_UNKNOWN_ISSUER error message and the associated warning
> that
> > > "Your connection is not secure".
> > >
> > > Okay in Chrome & IE.
> >
> >
> > Yes, it's that time again!
> >
> > :-)
> >
> >
> > Gordo
> >
> >
> > ___
> > Wikimedia UK mailing list
> > wikimediau...@wikimedia.org 
> > https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> > 
> > WMUK: https://wikimedia.org.uk
> >
> >
> >
> >
> > --
> >
> > Lucy Crompton-Reid
> >
> > Chief Executive
> >
> > Wikimedia UK
> >
> > +44 (0) 207 065 0991
> >
> >
> >
> > Wikimedia UK is a Company Limited by Guarantee registered in England and
> > Wales, Registered No. 6741827. Registered Charity No.1144513. Registered
> > Office 4th Floor, Development House, 56-64 Leonard Street, London EC2A
> 4LT.
> >
> > Wikimedia UK is the UK chapter of a global Wikimedia movement. The
> > Wikimedia projects are run by the Wikimedia Foundation (who operate
> > Wikipedia, amongst other projects). *Wikimedia UK is an independent
> > non-profit charity with no legal control over Wikipedia nor
> > responsibility for its contents.*
> >
> >
> >
> > ___
> > Wikimedia UK mailing list
> > wikimediau...@wikimedia.org
> > https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> > WMUK: https://wikimedia.org.uk
> >
>
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

Any update on when this will be fixed?

Many thanks,

Gordon


On 15/09/16 13:10, Lucy Crompton-Reid wrote:
> Hi Gordo (and all)
> 
> We have successfully purchased a new SSL certificate (for three years)
> and I believe one of our developers was installing it yesterday, so I'm
> not sure exactly what's happened here. Will investigate but the person
> dealing with this is taking a few days off for his birthday so it may
> take a few days for us to get back to you/resolve any issues, sorry. 
> 
> Lucy
> 
> 
> On 15 September 2016 at 13:04, Gordon Joly  > wrote:
> 
> On 15/09/16 12:59, Katie Chan wrote:
> > Firefox (Win & Linux) & https://wikimedia.org.uk/ results in a
> > SEC_ERROR_UNKNOWN_ISSUER error message and the associated warning that
> > "Your connection is not secure".
> >
> > Okay in Chrome & IE.
> 
> 
> Yes, it's that time again!
> 
> :-)
> 
> 
> Gordo
> 
> 
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org 
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> 
> WMUK: https://wikimedia.org.uk
> 
> 
> 
> 
> -- 
> 
> Lucy Crompton-Reid
> 
> Chief Executive
> 
> Wikimedia UK
> 
> +44 (0) 207 065 0991
> 
>  
> 
> Wikimedia UK is a Company Limited by Guarantee registered in England and
> Wales, Registered No. 6741827. Registered Charity No.1144513. Registered
> Office 4th Floor, Development House, 56-64 Leonard Street, London EC2A 4LT.
> 
> Wikimedia UK is the UK chapter of a global Wikimedia movement. The
> Wikimedia projects are run by the Wikimedia Foundation (who operate
> Wikipedia, amongst other projects). *Wikimedia UK is an independent
> non-profit charity with no legal control over Wikipedia nor
> responsibility for its contents.*
> 
> 
> 
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
> 


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Thomas Morton]

Odd; usually it is Google that is the strictest certificate chain...

Everything is kosher as far as I tested it so I am not sure where the
problem is; looking into it.

T

On Thu, 15 Sep 2016 at 17:08 Gordon Joly  wrote:

> On 15/09/16 13:10, Lucy Crompton-Reid wrote:
> > Hi Gordo (and all)
> >
> > We have successfully purchased a new SSL certificate (for three years)
> > and I believe one of our developers was installing it yesterday, so I'm
> > not sure exactly what's happened here. Will investigate but the person
> > dealing with this is taking a few days off for his birthday so it may
> > take a few days for us to get back to you/resolve any issues, sorry.
> >
> > Lucy
> >
>
>
> OK. I noticed it was a new certificate.
>
> Gordo
>
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 15/09/16 13:10, Lucy Crompton-Reid wrote:
> Hi Gordo (and all)
> 
> We have successfully purchased a new SSL certificate (for three years)
> and I believe one of our developers was installing it yesterday, so I'm
> not sure exactly what's happened here. Will investigate but the person
> dealing with this is taking a few days off for his birthday so it may
> take a few days for us to get back to you/resolve any issues, sorry. 
> 
> Lucy
> 


OK. I noticed it was a new certificate.

Gordo


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

FYI

Gordo

***


SSL Server Certificate
Issued To

Common Name (CN)*.wikimedia.org.uk
Organisation (O)Wikimedia UK
Organisational Unit (OU)IT
Issued By

Common Name (CN)Gandi Pro SSL CA 2
Organisation (O)Gandi
Organisational Unit (OU)
Validity Period

Issued On   Tuesday, 13 September 2016 at 01:00:00
Expires On  Wednesday, 18 September 2019 at 00:59:59





___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Lucy Crompton-Reid]

Hi Gordo (and all)

We have successfully purchased a new SSL certificate (for three years) and
I believe one of our developers was installing it yesterday, so I'm not
sure exactly what's happened here. Will investigate but the person dealing
with this is taking a few days off for his birthday so it may take a few
days for us to get back to you/resolve any issues, sorry.

Lucy


On 15 September 2016 at 13:04, Gordon Joly  wrote:

> On 15/09/16 12:59, Katie Chan wrote:
> > Firefox (Win & Linux) & https://wikimedia.org.uk/ results in a
> > SEC_ERROR_UNKNOWN_ISSUER error message and the associated warning that
> > "Your connection is not secure".
> >
> > Okay in Chrome & IE.
>
>
> Yes, it's that time again!
>
> :-)
>
>
> Gordo
>
>
> ___
> Wikimedia UK mailing list
> wikimediau...@wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
> WMUK: https://wikimedia.org.uk




-- 

Lucy Crompton-Reid

Chief Executive

Wikimedia UK

+44 (0) 207 065 0991



Wikimedia UK is a Company Limited by Guarantee registered in England and
Wales, Registered No. 6741827. Registered Charity No.1144513. Registered
Office 4th Floor, Development House, 56-64 Leonard Street, London EC2A 4LT.

Wikimedia UK is the UK chapter of a global Wikimedia movement. The
Wikimedia projects are run by the Wikimedia Foundation (who operate
Wikipedia, amongst other projects). *Wikimedia UK is an independent
non-profit charity with no legal control over Wikipedia nor responsibility
for its contents.*
___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 15/09/16 12:59, Katie Chan wrote:
> Firefox (Win & Linux) & https://wikimedia.org.uk/ results in a
> SEC_ERROR_UNKNOWN_ISSUER error message and the associated warning that
> "Your connection is not secure".
> 
> Okay in Chrome &

Here is a little more from Firefox.

Chrome is fine for me.

Gordo





https://wikimedia.org.uk/



Peer's Certificate issuer is not recognised.



HTTP Strict Transport Security: false

HTTP Public Key Pinning: false



Certificate chain:



-BEGIN CERTIFICATE-

MIIFXDCCBESgAwIBAgIQXRDqQk8tScYDVoJh5bgbHjANBgkqhkiG9w0BAQsFADBa

MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w

DAYDVQQKEwVHYW5kaTEbMBkGA1UEAxMSR2FuZGkgUHJvIFNTTCBDQSAyMB4XDTE2

MDkxMzAwMDAwMFoXDTE5MDkxNzIzNTk1OVowgcgxCzAJBgNVBAYTAkdCMREwDwYD

VQQREwhFQzJBIDRMVDEPMA0GA1UECBMGTG9uZG9uMQ8wDQYDVQQHEwZMb25kb24x

IjAgBgNVBAkTGTU2IC0gNjQgRGV2ZWxvcG1lbnQgSG91c2UxFTATBgNVBAoTDFdp

a2ltZWRpYSBVSzELMAkGA1UECxMCSVQxHzAdBgNVBAsTFkdhbmRpIFBybyBXaWxk

Y2FyZCBTU0wxGzAZBgNVBAMMEioud2lraW1lZGlhLm9yZy51azCCASIwDQYJKoZI

hvcNAQEBBQADggEPADCCAQoCggEBAMEXghbQ3/CXSWmsm86ynJ5+X1tLrEv6GBYT

K++UeOeU/rvLZd9ThhSAPqZZEBa6DuASf+612Yhj7pR+WlD/ieDTPSGnheWaHULZ

kOydp2KEJXlWJ9bOylelGupP1kS4vViGp3SjIENlloy83x8VgyxutIYmtuE4MmfW

dme9BvHsG8pt5AZ5iFwF+tPAKw9yL7y0oFv8RXsB1pgibldboKl/TYqjtG/lKYvj

M7rH2N8KRGLJ+tNi7Mh8btoE3KKKbgbDqiAWc0tzc2ZRv9zIFOw1Kdu6EfrkZw7r

GNzeE6+19qJj/xKZ1zuYFs4Zg4tFo+VymAWhzfxs9Tieo5ZPrXsCAwEAAaOCAa0w

ggGpMB8GA1UdIwQYMBaAFIDNSWy0U4QE4sr2jbFI2tgNlUtOMB0GA1UdDgQWBBTY

VNsyJvwr/G9At6RM8OzdGCeNhjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw

ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2Bgsr

BgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3Qu

Y29tMAgGBmeBDAECAjA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnVzZXJ0

cnVzdC5jb20vR2FuZGlQcm9TU0xDQTIuY3JsMG4GCCsGAQUFBwEBBGIwYDA3Bggr

BgEFBQcwAoYraHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpUHJvU1NMQ0Ey

LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAvBgNV

HREEKDAmghIqLndpa2ltZWRpYS5vcmcudWuCEHdpa2ltZWRpYS5vcmcudWswDQYJ

KoZIhvcNAQELBQADggEBAFH3bu8WPl8iHRyk4bobP35W1Mah1zlT9MfX6RMnXeiy

UFP8EBdtaAfQGVEjL2+yW7SKXjnJtrWBMlVrG5zHZn/7T9QF9prkKlZAiKwwCuue

fr1y7mInyad9zk3yjzyM56Baz4cWfgSyQSKafY1zs2VLZDHGQIZVEht5wyPAGN/0

XbUWaUJo/cncx1MWAlnMaYF0id43PvqI8UejCWON1Ow/Prx1C25TUjhVJpsaZw8v

WVb07E920oDWplN5U++p5Yt0/njYSEFFG2iiD+fFsL7cHYeON++G27IJCOp3ssdz

zcZIy1mjtQVS9gg7sZPEQExDYmjpB6MzsSFgtCTgTyo=

-END CERTIFICATE-

-BEGIN CERTIFICATE-

MIIEnjCCA4agAwIBAgIQPBkQvAZ54yVvTfQWo16zFDANBgkqhkiG9w0BAQUFADCB

lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug

Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho

dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt

SGFyZHdhcmUwHhcNMDgxMDIzMDAwMDAwWhcNMjAwNTMwMTA0ODM4WjA8MQswCQYD

VQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMRkwFwYDVQQDExBHYW5kaSBQcm8g

U1NMIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5nFDd2ffWY4

OxZxUVj2uQ49ms1N68h471Kq5j3R9OkVJYwObJqozTZvnlcmJ/QG5lZY9+RXDNyU

V1EKVL92l4vHkngDhhTQaoIB0sNeJMdnCzzjebnmN3VTbSTniQhYEZPg1554Zo+2

U39kHBCPKZbwNk11EP4f7U7goyatkNJl0b28zEjbfGvJbPNE6vfaiBfM06spAHft

gJbCC2lzmv9L5R+KlixFFk3P8IkZInLnrGZ6iP0XIckVI8ENoMxu0SXb5JnfF8OS

QKdqBZKFBMbNJCCBQjXiv50hQEvVTX/INrqoMUfOVV1OT2HmuhPEBdoU0tU75mwm

VArKuQAdwwIDAQABo4IBPjCCATowHwYDVR0jBBgwFoAUoXJfJhsomEOVXQc31YWW

nUvSw0UwHQYDVR0OBBYEFMGxMoDxE5IUL21nMJIYqnw5VRQ+MA4GA1UdDwEB/wQE

AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMBgGA1UdIAQRMA8wDQYLKwYBBAGyMQEC

AhowRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL1VU

Ti1VU0VSRmlyc3QtSGFyZHdhcmUuY3JsMHQGCCsGAQUFBwEBBGgwZjA9BggrBgEF

BQcwAoYxaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VUTkFkZFRydXN0U2VydmVy

X0NBLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAN

BgkqhkiG9w0BAQUFAAOCAQEAjSvVDlj6cT/RDFCrOvqpd1gZD7rzKzDGpfi3IciU

cjatYny806bAaAxRqL56e3O4rRMr+Jw1sHGpcqfKkm3YBW0CyJAum4vI07lYjZpn

9ihcWeatDX4gp/6Pm862lGITpB6TLriX1G7EYdnjOudIajawz64vnyTdvzmC18BV

+wC3A9f57mnqzm5SghMSeGlF78y9vPUXWPfBx9JY4Ga/r+U59djQrgbKY93sgyXD

3LS+K6NqGCKt58LcXQq75/e0OnHoJ3tiPMiB1IuYoIRCXevitc1ynVyP/m5wuZqB

wHHiX3Eo2RFMBCfSE7mSUoSwgHWtp1tHh0IvL8H7dmKjZQ==

-END CERTIFICATE-



___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk

Re: [Wikimediauk-l] Website certificate (again)

[Gordon Joly]

On 15/09/16 12:59, Katie Chan wrote:
> Firefox (Win & Linux) & https://wikimedia.org.uk/ results in a
> SEC_ERROR_UNKNOWN_ISSUER error message and the associated warning that
> "Your connection is not secure".
> 
> Okay in Chrome & IE.


Yes, it's that time again!

:-)


Gordo


___
Wikimedia UK mailing list
wikimediau...@wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l
WMUK: https://wikimedia.org.uk