News:

RAID is not a replacement for a backup! Here's why.

Main Menu

forums.buffalotech.com webserver misconfigured

Started by buffalou, September 12, 2018, 12:37:06 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

buffalou

September 12, 2018, 12:37:06 PM
Where to start, where to finish?

1) When registering for the website, an insecure call is made to gstatic.com; this should be a call over https.
2) The site certificate doesn't contain the Subject Alternative Name (SAN) of forums.buffalotech.com, thus spawning browser warnings for invalid certificate as the certificate delivered is for buffalotech.com, no wildcard.
3) There is a bad redirect or implied redirect on the SSL/TLS site that rewrites https://forums.buffalotech.com to https://www.forums.buffalotech.com, which then fails to connect.

In short, https is unavailable for the forum for some browser users.

Eastmarch

#1
September 12, 2018, 05:09:01 PM
I've inquired with my hosting peeps.
**A single copy of data, even on a RAID array, is NOT a backup! Hard drive failure is not a question of IF, but WHEN! Don't take my word for it, take Google's!**
Print
Go Up Pages1
User actions
Browser ID: smf (is_webkit)
Templates: 4: index (default), Display (default), GenericControls (default), GenericControls (default).
Sub templates: 6: init, html_above, body_above, main, body_below, html_below.
Language files: 5: index+Modifications.english (default), Post.english (default), Editor.english (default), Drafts.english (default), StopForumSpam.english (default).
Style sheets: 4: index.css, attachments.css, jquery.sceditor.css, responsive.css.
Hooks called: 153 (show)
Files included: 35 - 1354KB. (show)
Memory used: 943KB.
Tokens: post-login.
Queries used: 16.

[Show Queries]