Page 1 of 1

LF's 'invalid certificate'

Posted: December 8th, 2019, 10:09 am
by stewamax
The access problems that have been reported by some users may relate to TWO security certificates being in existence.

One is issued by Starfield to subject common name (CN) lemonfool.co.uk with a SAN of www.lemonfool.co.uk

The other - issued by cpanel (with prime issuer Sectigo - formerly Comodo) is issued to elara.servers.prgn.misp.co.uk which is also listed in the certificate's Subject CN (the SAN is www.elara.servers.prgn.misp.co.uk) instead of lemonfool.co.uk. It this mismatch that causes access to fail.

Re: LF's 'invalid certificate'

Posted: December 8th, 2019, 11:33 am
by stooz
That's odd.
I will look into it

Re: LF's 'invalid certificate'

Posted: December 8th, 2019, 11:33 am
by dspp
stewamax wrote:The access problems that have been reported by some users may relate to TWO security certificates being in existence.

One is issued by Starfield to subject common name (CN) lemonfool.co.uk with a SAN of http://www.lemonfool.co.uk

The other - issued by cpanel (with prime issuer Sectigo - formerly Comodo) is issued to elara.servers.prgn.misp.co.uk which is also listed in the certificate's Subject CN (the SAN is http://www.elara.servers.prgn.misp.co.uk) instead of lemonfool.co.uk. It this mismatch that causes access to fail.


Thanks. I've brought this to Stooz's attention. regards, dspp

Re: LF's 'invalid certificate'

Posted: December 8th, 2019, 12:13 pm
by Infrasonic

Re: LF's 'invalid certificate'

Posted: December 8th, 2019, 4:13 pm
by 88V8
My saved Favourites won't work today on IE or Edge.
I get a strange little page with Name... Last modified... Size... Description, which also happened a couple of days ago.

If I google For Lemon Fool forum via Edge, I can get in but only by ignoring a certificate warning.

Still using W7, btw.

V8

Re: LF's 'invalid certificate'

Posted: December 8th, 2019, 5:06 pm
by Breelander
Perhaps if/when the certificate is fixed it will (finally) cure my long-standing problem....

Breelander (Feb. 2017) wrote:I have a Panasonic Viera SmartTV which has (amongst other things) a web browser... As of today it cannot connect to lemonfool... examining the certificate shows a new certificate was issued four days ago...

viewtopic.php?f=39&t=3381

Re: LF's 'invalid certificate'

Posted: December 9th, 2019, 11:49 am
by Infrasonic
Any update on this?
My thread on this over on Computers, TVs & Phones here...viewtopic.php?f=39&t=20741

I'm still having issues and I note having had a trawl round the search engines (Google, DDG) that even the supposed LF https links aren't as they're pointing at the unencrypted site and that causes the browsers to get upset, if I try to bypass the certificate alert I get the cPanel alert. I appreciate any LF server changes will take a while for the SE crawlers to update their cache. The security certificate naming conflict appears to still be in place...

My bookmarks are all https (which is the only way I can access currently).

I understand the issues raised by the other BB thread here...viewtopic.php?f=21&t=20722 around contention ratios for the site with so many bot issues, but currently any casual browser is going to find it difficult to get onto the site, let alone register, and some of us who are registered are suffering log out loops making posting nearly impossible. (I'm posting this from Edge as Chrome has gone into a log out loop again and FF is playing up too...).

Re: LF's 'invalid certificate'

Posted: December 10th, 2019, 12:43 pm
by Infrasonic
Looks like the certificate issue has been resolved (I just checked again via the MX tools HTTPS lookup), search engine results are accessing now without issue (for me anyway), and I'm not having any log out issues currently... :)

Re: LF's 'invalid certificate'

Posted: December 10th, 2019, 2:50 pm
by PhaseThree
Yep - Seems to be working for me again
Thanks