David Gerard <mailto:dgerard@gmail.com> 15 June 2017 at 10:28 am Just renewed my WMUK membership, and Firefox balked at the SSL certificate. The cert doesn't expire until 2019, but Firefox 54 doesn't like it. Oddly, Chromium 58 is fine with it. Can anyone see what's wrong, which CA Firefox doesn't like any more etc? - d. _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

Update to Firefox 54 (just hit the Ubuntu repos today) and see what it does? On 15 June 2017 at 11:37, Michael Maggs &lt;Michael(a)maggs.name <mailto:Michael@maggs.name>> wrote: This seems to be a really odd and annoying error. I've come across it several times myself, using Firefox, but this time I had no problems with the certificate. I'm running Firefox for Mac 53.0.3 on MacOS Sierra. Michael _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org <mailto:wikimediauk-l@wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l <https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l> WMUK: https://wikimedia.org.uk

Update to Firefox 54 (just hit the Ubuntu repos today) and see what it does? On 15 June 2017 at 11:37, Michael Maggs &lt;Michael(a)maggs.name <mailto:Michael@maggs.name>> wrote: This seems to be a really odd and annoying error. I've come across it several times myself, using Firefox, but this time I had no problems with the certificate. I'm running Firefox for Mac 53.0.3 on MacOS Sierra. Michael _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org <mailto:wikimediauk-l@wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l <https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l> WMUK: https://wikimedia.org.uk _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

This seems to be a really odd and annoying error. I've come across it several times myself, using Firefox, but this time I had no problems with the certificate. I'm running Firefox for Mac 53.0.3 on MacOS Sierra. Michael > David Gerard <mailto:dgerard@gmail.com> > 15 June 2017 at 10:28 am > Just renewed my WMUK membership, and Firefox balked at the SSL > certificate. The cert doesn't expire until 2019, but Firefox 54 > doesn't like it. > > Oddly, Chromium 58 is fine with it. > > Can anyone see what's wrong, which CA Firefox doesn't like any more etc?

https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&… is as broken as ever and clearly shows the incomplete cert chain issue. I'm not going to mess around with yet another Bugzilla when what I'm reporting on is that I'm trying to give WMUK money and the site's not working properly. Y'know, WMUK can either care or not. On 25 June 2017 at 07:50, Emmanuel Engelhart &lt;emmanuel(a)engelhart-software.com&gt; wrote: Sierra. etc? _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

On 25 June 2017 at 09:18 David Gerard &lt;dgerard(a)gmail.com&gt; wrote: https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&… is as broken as ever and clearly shows the incomplete cert chain issue. I'm not going to mess around with yet another Bugzilla when what I'm reporting on is that I'm trying to give WMUK money and the site's not working properly. Y'know, WMUK can either care or not. I believe they accept cheques. Charles _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

Morning all. I've taken a look and I think have resolved all the existing issues. We're now getting an A on SSLLabs :) Charles can you check if the issue is resolved. Just to be clear on an important change; I've disabled TLSV1.1 and below on the confidential server (board wiki and CiviCRM/Donate page). This is because I feel it needs a boost in security; what this DOES mean is that it now no longer supports Android versions below 4.4 and IE 10 and below. If this poses a problem I can re-enable it, but standard practice is to move away from TLSV1.1 and below. I've left the website/wiki with the ealier TLS versions for wider support for now. Sorry it took so long to get to this; my Gmail I don't check so often nowadays and I get a lot of junk that hides meaningful things; I've unsubscribed from lots of stuff and sorted some filters out to help with this. I'll also subscribe my work address to this list. Cheers, Tom On Sun, 25 Jun 2017 at 10:35 Thomas Morton &lt;morton.thomas(a)googlemail.com <mailto:morton.thomas@googlemail.com>> wrote: taking a look this morning. Stay tuned. T On Sun, 25 Jun 2017 at 10:21 Charles Matthews &lt;charles.r.matthews(a)ntlworld.com <mailto:charles.r.matthews@ntlworld.com>> wrote: I believe they accept cheques. Charles _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org <mailto:wikimediauk-l@wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk

Sort of amusingly, that particular issue has its own bug report <https://bugzilla.wikimedia.org.uk/show_bug.cgi?id=431> which doesn't appear to have been worked on yet. -- Lewis Cawte

On 25/06/17 09:31, Lewis Cawte wrote: it. Thought I would sign up for Bugzilla. You know, put in my two cents worth... Pobox.com caught the email:- Date From Subject Caught By Jun 25, 2:11 pm bugs(a)wikimedia.org.uk Bugzilla: confirm account creation dnsbl/zen.spamhaus.org Gordo _______________________________________________ Wikimedia UK mailing list wikimediauk-l(a)wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediauk-l WMUK: https://wikimedia.org.uk