[deepamehta-users] SOLVED - Re: problems with my.deepamehta - revoked StartCom root certificate

[Juergen Neumann]

Hi all,

a brief update from the crawl space: I finally managed to get
Letsencrypt running. Certificate problem should be solved now.

Cheers,

Juergen

PS: Roll-out for other DeepaMehta domains will follow within the next
days.

Am Dienstag, den 07.02.2017, 11:46 +0100 schrieb Juergen Neumann:
> Dear Ingo and all,
> 
> the problem is exactly what you found out about StartSSL issues:
> 
> "StartSSL's certificates are no longer trusted by Chrome, Firefox,
> and
> soon other browsers, ..." 
> 
> Unfortunately we cannot just switch to Letsencryt (Certbot) as the
> setup at our ISP is not ready for it yet.
> 
> For the very moment you will have to override the security warnings
> in
> your browser. I am of course looking for a better solution ...
> 
> Thx and cheers,
> 
> Juergen
>  
> 
> Am Sonntag, den 05.02.2017, 13:16 +0100 schrieb Ingo Rau:
> > 
> > Hi Jörg et al.,
> > 
> > I am having problems connecting to https://my.deepamehta.de. Maybe
> > you can help. Firefox (Vers. 51.0.1) returns "Ein Fehler ist
> > während
> > einer Verbindung mit my.deepamehta.de aufgetreten. Das Zertifikat
> > der
> > Gegenstelle wurde widerrufen. Fehlercode:
> > SEC_ERROR_REVOKED_CERTIFICATE.  Die Website kann nicht angezeigt
> > werden, da die Authentizität der erhaltenen Daten nicht verifiziert
> > werden konnte." Another browsers prompts: "The certificate is not
> > trusted because the issuer certificate is unknown. The server might
> > not be sending the appropriate intermediate certificates. An
> > additional root certificate may need to be imported. Error code:
> > SEC_ERROR_UNKNOWN_ISSUER."
> > 
> > I found this thread on the partially revoked StartCom root
> > certificate (see answers below the post) and assume that hase
> > caused
> > the problem. Any hints on how to behave? With standard Firefox
> > security settings I can't even overrule the privacy warning.
> > 
> > https://webmasters.stackexchange.com/questions/103405/installing-st
> > ar
> > tssl-certificate-under-apache-gives-sec-error-revoked-certificate
> > 
> > Mit freundlichen Grüßen
> > 
> > Ingo Rau
> > e c o n a u t  
> > 
> > Mobil +49 176 1038 6359
> > Email ingo.rau at econauten.de
> > www.econauten.de
> > --
> > econauten UG (haftungsbeschränkt)  & Co. KG
> > Parkstraße 3
> > 13187 Berlin 
> > 
> > Registergericht KG: AG Berlin Charlottenburg, HRA 48373 B 
> > Komplementärin: econauten Verwaltungs- UG
> > (haftungsbeschränkt)       
> > Registergericht UG: AG Berlin Charlottenburg, HRB 151200 B 
> > Geschäftsführung:  Jürgen Neumann, Iris Rabener, Ingo Rau 
> > 
> > 
> > -- 
> > devel mailing list
> > devel at lists.deepamehta.de
> > http://lists.deepamehta.de/mailman/listinfo/devel-lists.deepamehta.
> > de
> -- 
> GnuPG KeyID: CD914C6C
> Fingerprint: C1CC EF1D 1443 7279 72E7 ABDC A2DA 0328 CD91 4C6C
> 
-- 
GnuPG KeyID: CD914C6C
Fingerprint: C1CC EF1D 1443 7279 72E7 ABDC A2DA 0328 CD91 4C6C