Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTPS problem #16

Open
slorquet opened this issue Jul 11, 2023 · 0 comments
Open

HTTPS problem #16

slorquet opened this issue Jul 11, 2023 · 0 comments

Comments

@slorquet
Copy link

Hi,

even if retro computers will usually access this via plain old HTTP, the HTTPS port is still available on the internet (and used by default my most browsers), but it returns the wrong certificate, making it look unsafe to browse.

Can you please disable port 443 or install a proper certificate (eg, letsencrypt) on this port?

Thank you very much, also thank you for making this in simple php.

Here is the output of curl from here, which shows a certificate valid only for *.cloudwaysapps.com

$ curl -v https://frogfind.com
*   Trying 64.227.13.248:443...
* TCP_NODELAY set
* Connected to frogfind.com (64.227.13.248) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.cloudwaysapps.com
*  start date: Apr 27 00:00:00 2023 GMT
*  expire date: May 27 23:59:59 2024 GMT
*  subjectAltName does not match frogfind.com
* SSL: no alternative certificate subject name matches target host name 'frogfind.com'
* Closing connection 0
* TLSv1.3 (OUT), TLS alert, close notify (256):
curl: (60) SSL: no alternative certificate subject name matches target host name 'frogfind.com'
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant