About www.ovirt.org TLS cert

[Ewoud Kohl van Wijngaarden]

On Wed, Jun 07, 2017 at 02:55:06AM +0900, Marc Dequènes (Duck) wrote:
> Quack,
> 
> So the Digicert system does not warn you about all certs but only if you
> were configured to be in some access list at creation or renewal time. I
> was not in RH when www.ovirt.org cert was issued, so…
> 
> Fortunately I was kindly warned by another guy having access to the
> system. I requested a renewal yesterday but today it is not yet done. So
> let's hope it is done when I wake up or during the day.

The chain is incomplete causing some requests to fail, see
https://www.ssllabs.com/ssltest/analyze.html?d=www.ovirt.org&latest

You can replicate it by using curl on the command line. Browsers often
have the chain cached and don't see the problem.