Discourse Misconfigured Cert - Firefox

[TomPridham]

Is this a feature request or a bug?

bug

Expected behavior:

being able to connect to https://discourse.entropic.dev/t/looking-for-help-setting-up-fluent-rs/203

Actual behavior:

security warning from firefox

Steps to replicate:

• have firefox 67
• go to https://discourse.entropic.dev/t/looking-for-help-setting-up-fluent-rs/203

Environment info (where relevant)

firefox on ubuntu
also happens with firefox on android

[zacanger]

This doesn't happen for me on browsers that have been to the Discourse instance before, but does on a clean install of Firefox Nightly on Android. The issuer there is Gandi so I wonder if FF doesn't recognize them as a CA by default, or if something was revoked?

Weirdly, I can hit registry.entropic.dev just fine even though it's (I think?) the same wildcard cert.

EDIT:

After hitting registry.entropic.dev I can now go back to discourse.entropic.dev just fine, so chances are that's why discourse works fine for me in my other browsers — because I'd already hit entropic.dev before Discourse was set up. Your alt name includes *.entropic.dev so I don't know what else to look at from here.

[iarna]

Some research implies that it may be missing intermediate certificates, as if you've visited a different site previously that provided them, it'll work:

http://wiki.gandi.net/en/ssl/intermediate

'course that site says "pre-2010" so whoooo knows