Page 1 of 1

Webpage Certificate Issue

Posted: Thu Apr 29, 2021 2:01 pm
by Voltoyle
Whenever I try to connect to this page, my antivirus blocks the site and I get this warning message:
Your connection to this website is not safe due to untrusted certificate and was blocked. Attackers might try to steal sensitive information from you, such as passwords or credit cards.
Is it possible to sort it out?

Re: Webpage Certificate Issue

Posted: Thu Apr 29, 2021 8:20 pm
by datsi
Hello,there is message in gametracker barbie server page why,but better Barbie answer u :]

Re: Webpage Certificate Issue

Posted: Fri Apr 30, 2021 1:10 am
by Voltoyle
Alrighty thank you :)

Re: Webpage Certificate Issue

Posted: Fri Apr 30, 2021 11:06 am
by Barbie
Probably - if you verify the fingerprint - a self signed certificate is more secure than a one that is issued by a third party, because there have been forged certificates in the past, even from well known certificate authorities. So in the end it is the question whom you trust. And if you use an unique password for this forum (what you should do), there is no important risk at all.

PS: I would have used "Let's Encrypt" for issuing a certificate, but they don't offer certificates for IP addresses, only for DNS names.

Re: Webpage Certificate Issue

Posted: Sat May 07, 2022 8:50 am
by Barbie
The forum uses a "valid" certificate now (issued by Let's Encrypt).

Re: Webpage Certificate Issue

Posted: Tue May 17, 2022 9:34 pm
by Eternity
https_hostname.png
https_hostname.png (1.8 KiB) Viewed 7210 times
Actually, i don't get this whole thing, because seen a lot of malicious sites that had "valid" certificates, issued even by such "trusted" companies as Comodo...

Re: Webpage Certificate Issue

Posted: Wed May 18, 2022 2:59 pm
by Barbie
Eternity wrote: Tue May 17, 2022 9:34 pm Actually, i don't get this whole thing, because seen a lot of malicious sites that had "valid" certificates, issued even by such "trusted" companies as Comodo...
What browser are you using? Can you view the certificate and post that?

Re: Webpage Certificate Issue

Posted: Thu May 19, 2022 3:44 pm
by Eternity
Browser is SlimJet. In certificate properties it says: "This certificate is OK."
It seems, a hostname should be "forum.barbies.world" for this certificate to work properly. I used "barbies.world" instead.
https-forum_hostname.png
https-forum_hostname.png (1.46 KiB) Viewed 7184 times
cert-info_general.png
cert-info_general.png (11.24 KiB) Viewed 7184 times
Though, as i see in certificates of some other sites - they issued to completely another hostnames than a hostname of the site is, nevertheless a connection status there appears as "secure".

Re: Webpage Certificate Issue

Posted: Sat Nov 11, 2023 9:25 pm
by corny
When you issue LetsEncrypt certificates you can specify alternative names, called Subject Alternative Name (SAN) - so you can specify forum.barbies.world for the alt name for barbies.world and both will work :)