[sword-devel] Firefox 44.0.2 and self-signed certs
DM Smith
dmsmith at crosswire.org
Mon Feb 15 14:14:54 MST 2016
I tried to fix this the other day, and will shortly. But the server locked up twice in that day. So I’ve backed out my changes (a one-liner for this issue) and am doing them one at a time. I hope to have that solved within a week.
In Him,
DM
> On Feb 15, 2016, at 3:44 PM, Jaak Ristioja <jaak at ristioja.ee> wrote:
>
> The Qualys SSL Labs SSL Server test gives crosswire.org <http://crosswire.org/> a C rating
> mainly due to supporting SSLv3 and the RC4 cipher.
>
> https://www.ssllabs.com/ssltest/analyze.html?d=crosswire.org&hideResults=on <https://www.ssllabs.com/ssltest/analyze.html?d=crosswire.org&hideResults=on>
>
> Blessings,
> Jaak
>
> On 15.02.2016 20:11, DM Smith wrote:
>> Went with LetsEncrypt. It should be proper for the entire crosswire.org <http://crosswire.org/>
>> <http://crosswire.org <http://crosswire.org/>> web. If you see a problem or have a question, let
>> me know.
>>
>> In Him,
>> DM Smith
>>
>>> On Feb 12, 2016, at 5:30 PM, Matěj Cepl <mcepl at cepl.eu <mailto:mcepl at cepl.eu>
>>> <mailto:mcepl at cepl.eu <mailto:mcepl at cepl.eu>>> wrote:
>>>
>>> On 2016-02-12, 19:28 GMT, David Haslam wrote:
>>>> Even so, this is the way browsers are moving!
>>>>
>>>> The sooner we can move away from self signed the better.
>>>
>>> Certainly, I see two ways out:
>>>
>>> * https://letsencrypt.org/ … I have never tried it, so
>>> I am not sure how really difficult it is, but it is
>>> supposed to be the free way how to get working and
>>> supported certificate for a website
>>>
>>> * I use personally certificate from
>>> https://www.startssl.com/ For me the price is US$60/two
>>> year certificate, not sure whether the company would be
>>> willing to give some discount for non-profit/religious
>>> organization, or we would be satisfied with the free
>>> certificate (one domain only, no wildcard).
>>>
>>> Best,
>>>
>>> Matěj
>>>
>>> --
>>> https://matej.ceplovi.cz/blog/ <https://matej.ceplovi.cz/blog/>, Jabber: mcepl at ceplovi.cz <mailto:mcepl at ceplovi.cz>
>>> <mailto:mcepl at ceplovi.cz <mailto:mcepl at ceplovi.cz>>
>>> GPG Finger: 89EF 4BC6 288A BF43 1BAB 25C3 E09F EF25 D964 84AC
>>>
>>> [...] a superior pilot uses his superior judgment to avoid having to
>>> exercise
>>> his superior skill.
>>> --
>>> http://www.jwz.org/blog/2009/09/that-duct-tape-silliness/#comment-10653 <http://www.jwz.org/blog/2009/09/that-duct-tape-silliness/#comment-10653>
>>>
>>>
>>> _______________________________________________
>>> sword-devel mailing list: sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>
>>> <mailto:sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>>
>>> http://www.crosswire.org/mailman/listinfo/sword-devel <http://www.crosswire.org/mailman/listinfo/sword-devel>
>>> Instructions to unsubscribe/change your settings at above page
>>
>>
>>
>> _______________________________________________
>> sword-devel mailing list: sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>
>> http://www.crosswire.org/mailman/listinfo/sword-devel <http://www.crosswire.org/mailman/listinfo/sword-devel>
>> Instructions to unsubscribe/change your settings at above page
>>
>
>
> _______________________________________________
> sword-devel mailing list: sword-devel at crosswire.org <mailto:sword-devel at crosswire.org>
> http://www.crosswire.org/mailman/listinfo/sword-devel <http://www.crosswire.org/mailman/listinfo/sword-devel>
> Instructions to unsubscribe/change your settings at above page
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.crosswire.org/pipermail/sword-devel/attachments/20160215/bf922ce5/attachment-0001.html>
More information about the sword-devel
mailing list