ssl certificate for www.cactuscode.org does not match common name

Comments (7)

1. 

   Steven R. Brandt

   • removed comment

   Actually, the problem is worse than that. Cactuscode.org has become einsteintoolkit.org. Let me look into this.

   • 2018-03-21T15:59:12+00:00
2. 

   Steven R. Brandt

   • changed status to resolved
   • removed comment

   • 2018-03-21T16:14:21+00:00
3. 

   Roland Haas reporter

   • changed status to open
   • removed comment

   Now there are two non matching ones in https://www.cct.lsu.edu/~knarf/cgi-bin/monitor.cgi:

   • einsteintoolkit.org wrong common name in certificate
   • www.cactuscode.org wrong common name in certificate

   • 2018-03-21T16:34:59+00:00
4. 

   Roland Haas reporter

   • removed comment

   This is still happening for cactuscode.org. Maybe this could be fixed while taking care of https://trac.einsteintoolkit.org/ticket/2145 ?

   • 2018-06-25T11:57:10+00:00
5. 

   Steven R. Brandt

   • removed comment

   I thought I'd cleared this long ago, and I don't see any problem. Both https://www.cactuscode.org and https://cactuscode.org both work for me.

   • 2018-06-25T13:06:36+00:00
6. 

   Roland Haas reporter

   • removed comment

   It works for me as well. Yet the monitor script referenced above (​https://www.cct.lsu.edu/~knarf/cgi-bin/monitor.cgi) complains. ssl checker (https://www.sslshopper.com/ssl-checker.html#hostname=https://www.cactuscode.org/) notes that a SHA1 signature is used which is somewhat unsafe these days.

   The wrong common name might be reported by gnutls-cli (but not openssl) https://outflux.net/blog/archives/2010/03/10/openssl-client-does-not-check-commonname/ which also seems to indicate that openssl is doing the "right thing".

   Note that the version of gnutls-cli on my Linux box (3.5.18) does not produce the warning.

   So it seems we should

   1. close this ticket as "worksforme"
   2. check the cgi script and update the gnutls-cli version it uses

   • 2018-06-25T13:43:41+00:00
7. 

   Roland Haas reporter

   • edited description
   • changed status to wontfix

   The SSL certs are ok, Frank's checking script uses a version of gnutls that complains about things that are explicitly allowed and wants things that are explicitly not liked.

   • 2019-02-20T14:29:47+00:00
8. Log in to comment