[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Debian derivatives census: Qlustar: website https issue



Hi Roland,

There is an issue with the Qlustar website in wget and in new browser
profiles. It seems that the Qlustar web server is returning a
certificate signed by Lets Encrypt but then returning the COMODO
certificate chain instead of the Lets Encrypt one.

Also, the apt sources.list snippet seems to indicate that Qlustar is
based on Debian wheezy, do you have any plans to upgrade to stretch?

https://wiki.debian.org/Derivatives/Census/Qlustar

It would be great if you could bring your census page into sync with
the template and fill in as many of the fields as you have data for.

https://wiki.debian.org/Derivatives/CensusTemplate

$ wget https://www.qlustar.com/
--2019-04-08 18:17:25--  https://www.qlustar.com/
Resolving www.qlustar.com (www.qlustar.com)... 188.68.35.16
Connecting to www.qlustar.com (www.qlustar.com)|188.68.35.16|:443... connected.
ERROR: The certificate of ‘www.qlustar.com’ is not trusted.
ERROR: The certificate of ‘www.qlustar.com’ doesn't have a known issuer.

$ openssl s_client -showcerts -connect www.qlustar.com:443 -servername www.qlustar.com < /dev/null |& grep 'CN ='
depth=0 CN = www.qlustar.com
depth=0 CN = www.qlustar.com
 0 s:CN = www.qlustar.com
   i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
 1 s:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Domain Validation Secure Server CA
   i:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
 2 s:C = GB, ST = Greater Manchester, L = Salford, O = COMODO CA Limited, CN = COMODO RSA Certification Authority
   i:C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root
subject=CN = www.qlustar.com
issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: