Tom Wellige

SSL (https) support

Recommended Posts

Hello all.

 

Over the next few days the forum will switch from http to https (encrypted) connection between the server and your browser.

This will happen in 2 or 3 steps, so it is possible, that your browser will tell you something in between like "broken encryption". You can completely ignore that.

 

Once everything is up an running I will post here again.

Share this post


Link to post
Share on other sites

From my perspective everything should be fine now. 

If you get any warnings or error messages from your browser while surfing www.swyx-forum.com please feel free to let me know.

 

Share this post


Link to post
Share on other sites

Hi Tom,

when I try to open the forum page with Firefox, I'm getting the following error message:

"Ein Fehler ist während einer Verbindung mit www.swyx-forum.com aufgetreten. Der OCSP-Server schlägt vor, es später erneut zu versuchen. Fehlercode: SEC_ERROR_OCSP_TRY_SERVER_LATER

    Die Website kann nicht angezeigt werden, da die Authentizität der erhaltenen Daten nicht verifiziert werden konnte.
    Kontaktieren Sie bitte den Inhaber der Website, um ihn über dieses Problem zu informieren."

With IE it's working fine.

 

Is this a local issue with my browser, or is this a server problem?

Share this post


Link to post
Share on other sites

Hi Markus,

 

my Chrome is happy with the certificate, but I just learned that Google is not using OCSP.  But the IE does and is happy with the certificate. So this must be some sort of Firefox problem.

 

Maybe if someone with a Safari browser could check this?

Share this post


Link to post
Share on other sites

Hi Tom!

 

Your webserver has OCSP stapling support enabled, but responses "TRY_LATER" (see: https://www.ssllabs.com/ssltest/analyze.html?d=www.swyx-forum.com).

 

Here is somebody with a similar issue:  https://loopbyte.com/blog/post/how-to-resolve-apache-ssl-website-error-secerrorocsptryserverlater

 

Quick workaround for Firefox users (not such a good solution of course - should be enabled again later): https://support.mozilla.org/de/questions/1120024

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now