1. Forum
  2. FidoNet
  3. SYNC SYSOPS

  • Letsyncrypt error 44?

    From Android8675@1:103/705 to Digital Man on Tuesday, September 29, 2020 12:27:56
    Re: Letsyncrypt error 44?
    By: Digital Man to Android8675 on Tue Sep 22 2020 03:40 pm

    I think you need Deuce's help now (in #synchronet, irc.synchro.net).

    I somehow got it all going. Had to do some... things... restarted everything and it's working.

    What's weird is it's saying not secure (chrome) but I'm pretty sure that's because the openweather sidebar module links to an unsecured site or something, but the letsyncrypt certificate is valid, so might have to bug eChicken about that one.


    --
    Android8675@ShodansCore

    ---
    � Synchronet � Shodan's Core @ ShodansCore.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Android8675 on Tuesday, September 29, 2020 20:18:43
    Re: Letsyncrypt error 44?
    By: Android8675 to Digital Man on Tue Sep 29 2020 12:27:56

    What's weird is it's saying not secure (chrome) but I'm pretty sure that's because the openweather
    sidebar module links to an unsecured site or something, but the letsyncrypt certificate is valid, so
    might have to bug eChicken about that one.

    I killed the openweathermap sidebar module, so consider it unsupported.

    It's unlikely to be the problem, though. That module executes on the server and dumps the HTML response to the client. The HTTP request goes from your server to theirs, so the client shouldn't have anything to complain about.

    I'll take a peek at your site later and see if anything jumps out at me.

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    � Synchronet � electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Android8675 on Tuesday, September 29, 2020 20:23:34
    Re: Letsyncrypt error 44?
    By: echicken to Android8675 on Tue Sep 29 2020 20:18:43

    What's weird is it's saying not secure (chrome) but I'm pretty sure that's because the
    openweather sidebar module links to an unsecured site or something, but the letsyncrypt
    certificate is valid, so might have to bug eChicken about that one.

    So you are correct, that module is the problem.

    The HTML that's being fetched (server side) and rendered on the client contains an image which is being loaded via plain HTTP, thus mixed secure/insecure content.

    If you would try something for me, make a copy of exec/load/openweathermap.js in your mods/ directory. On line 74 of that file (in mods/) change http:// to https://. See if it works and resolves the problem.

    I'm not sure if there's some reason I didn't use HTTPS to begin with, which I normally would. It's possible that they don't allow it on their free tier or something. We'll see.

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    � Synchronet � electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Android8675@1:103/705 to echicken on Thursday, October 15, 2020 13:35:41
    Re: Letsyncrypt error 44?
    By: echicken to Android8675 on Tue Sep 29 2020 08:23 pm

    What's weird is it's saying not secure (chrome) but I'm pretty sure that's because the
    openweather sidebar module links to an unsecured site or something, but the letsyncrypt
    certificate is valid, so might have to bug eChicken about that one.

    So you are correct, that module is the problem.

    If you would try something for me, make a copy of exec/load/openweathermap.js in your mods/ directory. On line 74 of that file
    (in mods/) change http:// to https://. See if it works and resolves the problem.


    I put the file in mods, changed line 74. seems to be working, no security errors, but the problem went away when I added the
    HSTS_SAFE option to [web] section of sbbs.ini which tells the web server to just use https:// I dunno. The change is in place,
    seems to be working.

    --
    Android8675@ShodansCore

    ---
    � Synchronet � Shodan's Core @ ShodansCore.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to Android8675 on Thursday, October 15, 2020 23:43:45
    Re: Letsyncrypt error 44?
    By: Android8675 to echicken on Thu Oct 15 2020 13:35:41

    directory. On line 74 of that file (in mods/) change http:// to https://. See if it works and

    I put the file in mods, changed line 74. seems to be working, no security errors, but the problem

    Thanks, I'll see about updating that.

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    � Synchronet � electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)