On 15/09/16 12:59, Katie Chan wrote: Here is a little more from Firefox. Chrome is fine for me. Gordo ************************ https://wikimedia.org.uk/ Peer's Certificate issuer is not recognised. HTTP Strict Transport Security: false HTTP Public Key Pinning: false Certificate chain: -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIQXRDqQk8tScYDVoJh5bgbHjANBgkqhkiG9w0BAQsFADBa MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEbMBkGA1UEAxMSR2FuZGkgUHJvIFNTTCBDQSAyMB4XDTE2 MDkxMzAwMDAwMFoXDTE5MDkxNzIzNTk1OVowgcgxCzAJBgNVBAYTAkdCMREwDwYD VQQREwhFQzJBIDRMVDEPMA0GA1UECBMGTG9uZG9uMQ8wDQYDVQQHEwZMb25kb24x IjAgBgNVBAkTGTU2IC0gNjQgRGV2ZWxvcG1lbnQgSG91c2UxFTATBgNVBAoTDFdp a2ltZWRpYSBVSzELMAkGA1UECxMCSVQxHzAdBgNVBAsTFkdhbmRpIFBybyBXaWxk Y2FyZCBTU0wxGzAZBgNVBAMMEioud2lraW1lZGlhLm9yZy51azCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMEXghbQ3/CXSWmsm86ynJ5+X1tLrEv6GBYT K++UeOeU/rvLZd9ThhSAPqZZEBa6DuASf+612Yhj7pR+WlD/ieDTPSGnheWaHULZ kOydp2KEJXlWJ9bOylelGupP1kS4vViGp3SjIENlloy83x8VgyxutIYmtuE4MmfW dme9BvHsG8pt5AZ5iFwF+tPAKw9yL7y0oFv8RXsB1pgibldboKl/TYqjtG/lKYvj M7rH2N8KRGLJ+tNi7Mh8btoE3KKKbgbDqiAWc0tzc2ZRv9zIFOw1Kdu6EfrkZw7r GNzeE6+19qJj/xKZ1zuYFs4Zg4tFo+VymAWhzfxs9Tieo5ZPrXsCAwEAAaOCAa0w ggGpMB8GA1UdIwQYMBaAFIDNSWy0U4QE4sr2jbFI2tgNlUtOMB0GA1UdDgQWBBTY VNsyJvwr/G9At6RM8OzdGCeNhjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2Bgsr BgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3Qu Y29tMAgGBmeBDAECAjA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3JsLnVzZXJ0 cnVzdC5jb20vR2FuZGlQcm9TU0xDQTIuY3JsMG4GCCsGAQUFBwEBBGIwYDA3Bggr BgEFBQcwAoYraHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpUHJvU1NMQ0Ey LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAvBgNV HREEKDAmghIqLndpa2ltZWRpYS5vcmcudWuCEHdpa2ltZWRpYS5vcmcudWswDQYJ KoZIhvcNAQELBQADggEBAFH3bu8WPl8iHRyk4bobP35W1Mah1zlT9MfX6RMnXeiy UFP8EBdtaAfQGVEjL2+yW7SKXjnJtrWBMlVrG5zHZn/7T9QF9prkKlZAiKwwCuue fr1y7mInyad9zk3yjzyM56Baz4cWfgSyQSKafY1zs2VLZDHGQIZVEht5wyPAGN/0 XbUWaUJo/cncx1MWAlnMaYF0id43PvqI8UejCWON1Ow/Prx1C25TUjhVJpsaZw8v WVb07E920oDWplN5U++p5Yt0/njYSEFFG2iiD+fFsL7cHYeON++G27IJCOp3ssdz zcZIy1mjtQVS9gg7sZPEQExDYmjpB6MzsSFgtCTgTyo= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIEnjCCA4agAwIBAgIQPBkQvAZ54yVvTfQWo16zFDANBgkqhkiG9w0BAQUFADCB lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt SGFyZHdhcmUwHhcNMDgxMDIzMDAwMDAwWhcNMjAwNTMwMTA0ODM4WjA8MQswCQYD VQQGEwJGUjESMBAGA1UEChMJR0FOREkgU0FTMRkwFwYDVQQDExBHYW5kaSBQcm8g U1NMIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5nFDd2ffWY4 OxZxUVj2uQ49ms1N68h471Kq5j3R9OkVJYwObJqozTZvnlcmJ/QG5lZY9+RXDNyU V1EKVL92l4vHkngDhhTQaoIB0sNeJMdnCzzjebnmN3VTbSTniQhYEZPg1554Zo+2 U39kHBCPKZbwNk11EP4f7U7goyatkNJl0b28zEjbfGvJbPNE6vfaiBfM06spAHft gJbCC2lzmv9L5R+KlixFFk3P8IkZInLnrGZ6iP0XIckVI8ENoMxu0SXb5JnfF8OS QKdqBZKFBMbNJCCBQjXiv50hQEvVTX/INrqoMUfOVV1OT2HmuhPEBdoU0tU75mwm VArKuQAdwwIDAQABo4IBPjCCATowHwYDVR0jBBgwFoAUoXJfJhsomEOVXQc31YWW nUvSw0UwHQYDVR0OBBYEFMGxMoDxE5IUL21nMJIYqnw5VRQ+MA4GA1UdDwEB/wQE AwIBBjASBgNVHRMBAf8ECDAGAQH/AgEAMBgGA1UdIAQRMA8wDQYLKwYBBAGyMQEC AhowRAYDVR0fBD0wOzA5oDegNYYzaHR0cDovL2NybC51c2VydHJ1c3QuY29tL1VU Ti1VU0VSRmlyc3QtSGFyZHdhcmUuY3JsMHQGCCsGAQUFBwEBBGgwZjA9BggrBgEF BQcwAoYxaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VUTkFkZFRydXN0U2VydmVy X0NBLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAN BgkqhkiG9w0BAQUFAAOCAQEAjSvVDlj6cT/RDFCrOvqpd1gZD7rzKzDGpfi3IciU cjatYny806bAaAxRqL56e3O4rRMr+Jw1sHGpcqfKkm3YBW0CyJAum4vI07lYjZpn 9ihcWeatDX4gp/6Pm862lGITpB6TLriX1G7EYdnjOudIajawz64vnyTdvzmC18BV +wC3A9f57mnqzm5SghMSeGlF78y9vPUXWPfBx9JY4Ga/r+U59djQrgbKY93sgyXD 3LS+K6NqGCKt58LcXQq75/e0OnHoJ3tiPMiB1IuYoIRCXevitc1ynVyP/m5wuZqB wHHiX3Eo2RFMBCfSE7mSUoSwgHWtp1tHh0IvL8H7dmKjZQ== -----END CERTIFICATE-----

FYI Gordo *********************************************** SSL Server Certificate Issued To Common Name (CN) *.wikimedia.org.uk Organisation (O) Wikimedia UK Organisational Unit (OU) IT Issued By Common Name (CN) Gandi Pro SSL CA 2 Organisation (O) Gandi Organisational Unit (OU) <Not Part Of Certificate> Validity Period Issued On Tuesday, 13 September 2016 at 01:00:00 Expires On Wednesday, 18 September 2019 at 00:59:59

Odd; usually it is Google that is the strictest certificate chain... Everything is kosher as far as I tested it so I am not sure where the problem is; looking into it. T On Thu, 15 Sep 2016 at 17:08 Gordon Joly &lt;gordon.joly(a)pobox.com&gt; wrote:

Hey all, So the error message doesn't fit with the facts; its complaining about missing a certificate but then shows it in the error detail. I'm working on this, trying different things to resolve. Bear with for a day or so more :) sorry! T On Wed, 21 Sep 2016 09:29 Gordon Joly, &lt;gordon.joly(a)pobox.com&gt; wrote:

On 21/09/16 11:17, Lucy Crompton-Reid wrote: Can I perhaps shed some light? Firefox is now complaining about some other sites, so perhaps the fault is with Firefox? I run Firefox 48.0 on Linux Mint 17.3 Gordo

On 22/09/16 10:37, Gordon Joly wrote: Site is looking fine from here - on Firefox. I AM having a problem with Firefox on a couple of sites where we now have letsencrypt certificates on the main sites, but some sub domains are still http:// ... Firefox now complains that the certificate is wrong while the setup works fine on other browsers. When the certificate needs renewing , letsencrypt is worth a look as it's free and can be configured to automatically refresh it's certificates. -- Lester Caine - G8HFL ----------------------------- Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

On 22/09/16 15:11, Gordon Joly wrote: Bit off base for here, but https://starttls.info/ The warning on Firefox explained that only starttls.info is supported. I dropped the www. on all the sites I support, and just forward www.* to the main domain, looks like that is missing for starttls.info. -- Lester Caine - G8HFL ----------------------------- Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk Rainbow Digital Media - http://rainbowdigitalmedia.co.uk

On 02/10/16 17:50, Gordon Joly wrote: The Qualys SSL checker: https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk&latest is less than happy about the site, granting it only a grade C for both the IPv4 and IPv6 configurations. See the reports generated there for a whole bunch of warnings regarding potential vulnerabilities and other technical glitches regarding both the certificate and server configuration. Neil

Cracked it! Man that was complicated; got stuff in the right order. Just running updates now. T On Tue, 11 Oct 2016 at 09:30 Thomas Morton &lt;morton.thomas(a)googlemail.com&gt; wrote: Eek! That's not good. I've been testing different things but nothing is working with FireFox. This Chrome one is new :/ I'll take a look tonight with a priority. T On Tue, 11 Oct 2016 09:24 , &lt;leutha(a)fabiant.eu&gt; wrote: Hi all, I tried using Chrome as an alternative browser but experienced problems with that as well. all the best Fabian aka Leutha On 08 October 2016 at 16:21 Gordon Joly &lt;gordon.joly(a)pobox.com&gt; wrote: The Qualys SSL checker: https://www.ssllabs.com/ssltest/analyze.html?d=wikimedia.org.uk&latest is less than happy about the site, granting it only a grade C for both the IPv4 and IPv6 configurations. See the reports generated there for a whole bunch of warnings regarding potential vulnerabilities and other technical glitches regarding both the certificate and server configuration. Neil "This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. Grade capped to C." Any chance that WMUK can fix the server? Gordo _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

Thomas Morton - where are you? You're needed again! Gordo On 11/10/16 21:07, Richard Nevell wrote: