About www.ovirt.org TLS cert

Ewoud Kohl van Wijngaarden ewoud+ovirt at kohlvanwijngaarden.nl
Sun Jun 18 08:26:24 UTC 2017


On Mon, Jun 12, 2017 at 12:03:46PM +0200, Ewoud Kohl van Wijngaarden wrote:
>On Wed, Jun 07, 2017 at 02:55:06AM +0900, Marc Dequènes (Duck) wrote:
>> Quack,
>>
>> So the Digicert system does not warn you about all certs but only if you
>> were configured to be in some access list at creation or renewal time. I
>> was not in RH when www.ovirt.org cert was issued, so…
>>
>> Fortunately I was kindly warned by another guy having access to the
>> system. I requested a renewal yesterday but today it is not yet done. So
>> let's hope it is done when I wake up or during the day.
>
> The chain is incomplete causing some requests to fail, see 
> https://www.ssllabs.com/ssltest/analyze.html?d=www.ovirt.org&latest
>
> You can replicate it by using curl on the command line. Browsers often 
> have the chain cached and don't see the problem.

This is still an issue.


More information about the Infra mailing list