Re: [fpc-pascal] freepascal.org SSL_ERROR_BAD_CERT_DOMAIN

2022-01-10 Thread Marc Weustink via fpc-pascal



On 5-1-2022 10:15, Mattias Gaertner via fpc-pascal wrote:

On Wed, 5 Jan 2022 09:40:49 +0200
"Dimitrios Chr. Ioannidis via fpc-pascal"
 wrote:


Hi,

Στις 5/1/2022 2:00 π.μ., ο/η Rainer Stratmann via fpc-pascal έγραψε:

https://freepascal.org/


the certificate issued for www.freepascal.org and not for
freepascal.org .

It seems that the let's encrypt script was run with -d freepascal.org
instead of -d *.freepascal.org .


or

-d freepascal.org,www.freepascal.org


Better, since forum.lazarus.freepascal.org is not served by this server 
and has a different LE certificate.


if lets encrypt registers certificates right, there cannot exist a 
*.freepascal.org and a different forum.lazarus.freepascal.org cert.


Marc
___
fpc-pascal maillist  -  fpc-pascal@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal


Re: [fpc-pascal] freepascal.org SSL_ERROR_BAD_CERT_DOMAIN

2022-01-10 Thread Marc Weustink via fpc-pascal



On 10-1-2022 17:45, Marc Weustink via fpc-pascal wrote:



On 5-1-2022 10:15, Mattias Gaertner via fpc-pascal wrote:

On Wed, 5 Jan 2022 09:40:49 +0200
"Dimitrios Chr. Ioannidis via fpc-pascal"
 wrote:


Hi,

Στις 5/1/2022 2:00 π.μ., ο/η Rainer Stratmann via fpc-pascal έγραψε:

https://freepascal.org/


the certificate issued for www.freepascal.org and not for
freepascal.org .

It seems that the let's encrypt script was run with -d freepascal.org
instead of -d *.freepascal.org .


or

-d freepascal.org,www.freepascal.org


Better, since forum.lazarus.freepascal.org is not served by this server 
and has a different LE certificate.


if lets encrypt registers certificates right, there cannot exist a 
*.freepascal.org and a different forum.lazarus.freepascal.org cert.


OK, after some reading, this seems to be allowed.
However while reading I noticed that *.freepascal.org doesn't cover 
freepascal.org. You have to define it separate



Marc

___
fpc-pascal maillist  -  fpc-pascal@lists.freepascal.org
https://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal