Webpage Certificate Issue

Topics about the forum itself like categories or language packs.
Post Reply
Voltoyle
Posts: 19
Joined: Thu Apr 29, 2021 1:52 pm

Webpage Certificate Issue

Post by Voltoyle »

Whenever I try to connect to this page, my antivirus blocks the site and I get this warning message:
Your connection to this website is not safe due to untrusted certificate and was blocked. Attackers might try to steal sensitive information from you, such as passwords or credit cards.
Is it possible to sort it out?
User avatar
datsi
Posts: 18
Joined: Sat Feb 29, 2020 2:59 pm

Re: Webpage Certificate Issue

Post by datsi »

Hello,there is message in gametracker barbie server page why,but better Barbie answer u :]
Attachments
forum.PNG
forum.PNG (7.04 KiB) Viewed 7549 times
Image
Voltoyle
Posts: 19
Joined: Thu Apr 29, 2021 1:52 pm

Re: Webpage Certificate Issue

Post by Voltoyle »

Alrighty thank you :)
Barbie
Site Admin
Posts: 197
Joined: Thu Nov 08, 2018 7:12 am

Re: Webpage Certificate Issue

Post by Barbie »

Probably - if you verify the fingerprint - a self signed certificate is more secure than a one that is issued by a third party, because there have been forged certificates in the past, even from well known certificate authorities. So in the end it is the question whom you trust. And if you use an unique password for this forum (what you should do), there is no important risk at all.

PS: I would have used "Let's Encrypt" for issuing a certificate, but they don't offer certificates for IP addresses, only for DNS names.
Barbie
Site Admin
Posts: 197
Joined: Thu Nov 08, 2018 7:12 am

Re: Webpage Certificate Issue

Post by Barbie »

The forum uses a "valid" certificate now (issued by Let's Encrypt).
Eternity
Posts: 5
Joined: Thu Dec 19, 2019 6:24 pm

Re: Webpage Certificate Issue

Post by Eternity »

https_hostname.png
https_hostname.png (1.8 KiB) Viewed 6592 times
Actually, i don't get this whole thing, because seen a lot of malicious sites that had "valid" certificates, issued even by such "trusted" companies as Comodo...
Barbie
Site Admin
Posts: 197
Joined: Thu Nov 08, 2018 7:12 am

Re: Webpage Certificate Issue

Post by Barbie »

Eternity wrote: Tue May 17, 2022 9:34 pm Actually, i don't get this whole thing, because seen a lot of malicious sites that had "valid" certificates, issued even by such "trusted" companies as Comodo...
What browser are you using? Can you view the certificate and post that?
Attachments
Certificate-SHA-1-A670BB17C92FE565273D70AD0B2A88CB1866BE18.jpg
Certificate-SHA-1-A670BB17C92FE565273D70AD0B2A88CB1866BE18.jpg (120.9 KiB) Viewed 6576 times
Eternity
Posts: 5
Joined: Thu Dec 19, 2019 6:24 pm

Re: Webpage Certificate Issue

Post by Eternity »

Browser is SlimJet. In certificate properties it says: "This certificate is OK."
It seems, a hostname should be "forum.barbies.world" for this certificate to work properly. I used "barbies.world" instead.
https-forum_hostname.png
https-forum_hostname.png (1.46 KiB) Viewed 6566 times
cert-info_general.png
cert-info_general.png (11.24 KiB) Viewed 6566 times
Though, as i see in certificates of some other sites - they issued to completely another hostnames than a hostname of the site is, nevertheless a connection status there appears as "secure".
corny
Posts: 1
Joined: Sat Nov 11, 2023 9:23 pm

Re: Webpage Certificate Issue

Post by corny »

When you issue LetsEncrypt certificates you can specify alternative names, called Subject Alternative Name (SAN) - so you can specify forum.barbies.world for the alt name for barbies.world and both will work :)
Post Reply