arximboldi/immer

Documentation site has expired certificate

esp1 opened this issue · 5 comments

esp1 commented

The immer documentation site https://sinusoid.es/immer/#contents has an invalid SSL certificate. It looks like it is based on a root certificate that expired on Sept 30, 2021:
image

Are you sure you have newest certificate pack? X3 is expired but R3 is also signed by X1, that should be in your CA certificate pack.

esp1 commented

I tried this out on the latest version of various desktop (MacOS 11.6 - Safari, Chrome, Brave) and mobile (iOS 15.1 - Safari, Chrome, Firefox, Firefox Focus) browsers, and this certificate error shows up on all of them. The only browser I found it does work on is the latest version of Mac desktop Firefox (version 94.0.1 (64-bit)).

I reproduced this problem with iOS device and epiphany (gnome web) on Linux. Firefox and Brave are not affected on Linux.
I think solution would be to add X1 into certificate chain on server.

Hi, thank you all for debugging this. It was reported by someone else some time ago and I could also not reproduce it. The certificate is Let's encrypt auto-generated. I'm not sure how to fix it. Anyway I would like to migrate that server at some point from the Debian into NixOS, which is much easier to manage. Hopefully that will fix the issue. It may still take a few days or weeks until I find time to do that though.

esp1 commented

Closing this issue as the doc site works fine for me now