About www.ovirt.org TLS cert
Ewoud Kohl van Wijngaarden
ewoud+ovirt at kohlvanwijngaarden.nl
Sun Jun 18 08:26:24 UTC 2017
On Mon, Jun 12, 2017 at 12:03:46PM +0200, Ewoud Kohl van Wijngaarden wrote:
>On Wed, Jun 07, 2017 at 02:55:06AM +0900, Marc Dequènes (Duck) wrote:
>> Quack,
>>
>> So the Digicert system does not warn you about all certs but only if you
>> were configured to be in some access list at creation or renewal time. I
>> was not in RH when www.ovirt.org cert was issued, so…
>>
>> Fortunately I was kindly warned by another guy having access to the
>> system. I requested a renewal yesterday but today it is not yet done. So
>> let's hope it is done when I wake up or during the day.
>
> The chain is incomplete causing some requests to fail, see
> https://www.ssllabs.com/ssltest/analyze.html?d=www.ovirt.org&latest
>
> You can replicate it by using curl on the command line. Browsers often
> have the chain cached and don't see the problem.
This is still an issue.
More information about the Infra
mailing list