Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread David Gerard
https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&latest is as broken as ever and clearly shows the incomplete cert chain issue. I'm not going to mess around with yet another Bugzilla when what I'm reporting on is that I'm trying to give WMUK money and the site's not working p

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Lewis Cawte
I'd question whether anyone would see the Bugzilla bug without actually looking, as most people probably won't be seeing any of the emails from it. Sort of amusingly, that particular issue has its own bug report which doesn't appear to have b

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Charles Matthews
> > On 25 June 2017 at 09:18 David Gerard wrote: > > > > > https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&latest > is as broken as ever and clearly shows the incomplete cert chain > issue. > > I'm not going to mess around with yet another Bugzilla

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Thomas Morton
taking a look this morning. Stay tuned. T On Sun, 25 Jun 2017 at 10:21 Charles Matthews < charles.r.matth...@ntlworld.com> wrote: > > On 25 June 2017 at 09:18 David Gerard wrote: > > > > https://www.ssllabs.com/ssltest/analyze.html?d=donate.wikimedia.org.uk&latest > is as broken as ever and cle

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Thomas Morton
Morning all. I've taken a look and I think have resolved all the existing issues. We're now getting an A on SSLLabs :) Charles can you check if the issue is resolved. Just to be clear on an important change; I've disabled TLSV1.1 and below on the confidential server (board wiki and CiviCRM/Donat

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Gordon Joly
What a star! Gordo On 25/06/17 11:05, Thomas Morton wrote: > Morning all. > > I've taken a look and I think have resolved all the existing issues. > We're now getting an A on SSLLabs :) Charles can you check if the issue > is resolved. > > Just to be clear on an important change; I've disa

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Lucy Crompton-Reid
Hi all I'm very sorry these issues are continuing - and thanks for you attempts to resolve them Tom. I'm away on holiday for the next two weeks but if you need to speak to someone in the office please contact Davina on 020 7065 0990. David, I will email you separately about this. Thanks all and

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Gordon Joly
On 25/06/17 09:31, Lewis Cawte wrote: > > > Sort of amusingly, that particular issue has its own bug report > which doesn't > appear to have been worked on yet. > > -- Lewis Cawte I have done the SPF/DKIM/DMARC faffage for my own server, w

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Gordon Joly
On 25/06/17 09:31, Lewis Cawte wrote: > I'd question whether anyone would see the Bugzilla bug without actually > looking, as most people probably won't be seeing any of the emails from it. > > Sort of amusingly, that particular issue has its own bug report >

Re: [Wikimediauk-l] Firefox doesn't like cert for https://donate.wikimedia.org.uk

2017-06-25 Thread Thomas Morton
Yep emails need some work; but because of the reason below its hard to fix. As to DKIM etc. the domain is currently registered with fasthost who have limited features in their DNS control panel. Will talk to Emmanuel about fixing it. T On 25 Jun 2017 19:20, "Gordon Joly" wrote: > On 25/06/17