Author Topic: img tags now go through an HTTPS proxy with a self–signed certificate  (Read 4954 times)

0 Members and 1 Guest are viewing this topic.

Offline db48x (OP)

  • Commodore
  • **********
  • d
  • Posts: 641
  • Thanked: 200 times
 

Offline Erik L

  • Administrator
  • Admiral of the Fleet
  • *****
  • Posts: 5654
  • Thanked: 366 times
  • Forum Admin
  • Discord Username: icehawke
  • 2020 Supporter 2020 Supporter : Donate for 2020
    2022 Supporter 2022 Supporter : Donate for 2022
    Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
I got a prompt to accept the cert. :)

It is self-signed by me. You can trust me. :)

Offline nuclearslurpee

  • Admiral of the Fleet
  • ***********
  • Posts: 2960
  • Thanked: 2222 times
  • Radioactive frozen beverage.
I am also seeing some images have disappeared. Some images seem fine (e.g. I scrolled through Froggiest's AAR and they look fine), however images in Steve's posts for example are missing and I believe he hosts his images on the site domain instead of Imgur etc.

I use Firefox and I did not see any pop-up regarding certs so I do not know how to make the latter images reappear.
 

Offline mtm84

  • Sub-Lieutenant
  • ******
  • m
  • Posts: 131
  • Thanked: 36 times
Might I suggest https://letsencrypt.org/.
 

Offline TheTalkingMeowth

  • Captain
  • **********
  • T
  • Posts: 494
  • Thanked: 203 times
  • Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
    2022 Supporter 2022 Supporter : Donate for 2022
I got a prompt to accept the cert. :)

It is self-signed by me. You can trust me. :)

I get a prompt on firefox if I click the https link the the OP.
 

Offline Erik L

  • Administrator
  • Admiral of the Fleet
  • *****
  • Posts: 5654
  • Thanked: 366 times
  • Forum Admin
  • Discord Username: icehawke
  • 2020 Supporter 2020 Supporter : Donate for 2020
    2022 Supporter 2022 Supporter : Donate for 2022
    Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
Might I suggest https://letsencrypt.org/.

Host is listed under "No planned support"

Offline Zap0

  • Captain
  • **********
  • Posts: 400
  • Thanked: 502 times
Yep, all the pictures in Steve's changelogs and AARs are gone. You only get a security warning if you access the image directly like with the links db48x posted, embedded ones in a thread just fail silently.

Even if you got the security warning, most people don't know what they are or are going to accept your cert.
 
The following users thanked this post: Neophyte, nuclearslurpee

Offline RougeNPS

  • Lt. Commander
  • ********
  • R
  • Posts: 217
  • Thanked: 38 times
Cant you just get your cert validated?
 

Offline Neophyte

  • Gold Supporter
  • Warrant Officer, Class 2
  • *****
  • Posts: 65
  • Thanked: 25 times
  • Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
    2022 Supporter 2022 Supporter : Donate for 2022
    2023 Supporter 2023 Supporter : Donate for 2023
Yep, all the pictures in Steve's changelogs and AARs are gone. You only get a security warning if you access the image directly like with the links db48x posted, embedded ones in a thread just fail silently.

Even if you got the security warning, most people don't know what they are or are going to accept your cert.

Yeah, if I hadn't read this thread I wouldn't even have known that any images were missing, I got no prompt (in latest Firefox) when loading other threads with the blocked images.  Only when I copied and pasted an image link from the source code did I get the security warning popup.
 

Offline Steve Walmsley

  • Aurora Designer
  • Star Marshal
  • S
  • Posts: 11649
  • Thanked: 20349 times
This is something outside my knowledge :)

What do I need to do to get the images to reappear?
 

Offline Black

  • Gold Supporter
  • Rear Admiral
  • *****
  • B
  • Posts: 868
  • Thanked: 218 times
  • Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2022 Supporter 2022 Supporter : Donate for 2022
    2023 Supporter 2023 Supporter : Donate for 2023
    2024 Supporter 2024 Supporter : Donate for 2024
If you click on link in the first post by db48x. There should be a message about certificate. If you allow the certificate the pictures should work again.
 

Offline Steve Walmsley

  • Aurora Designer
  • Star Marshal
  • S
  • Posts: 11649
  • Thanked: 20349 times
I get the following message:

"Your connection is not private
Attackers might be trying to steal your information from aurora2.pentarch.org (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID

This server could not prove that it is aurora2.pentarch.org; its security certificate is not trusted by your computer's operating system. This may be caused by a misconfiguration or an attacker intercepting your connection.

Proceed to aurora2.pentarch.org (unsafe)"


Do I have to click proceed to see the pictures?

Also, what has changed and is there a way to return to a situation where everyone can see the pictures?
 

Offline Erik L

  • Administrator
  • Admiral of the Fleet
  • *****
  • Posts: 5654
  • Thanked: 366 times
  • Forum Admin
  • Discord Username: icehawke
  • 2020 Supporter 2020 Supporter : Donate for 2020
    2022 Supporter 2022 Supporter : Donate for 2022
    Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
You should click proceed.

People complained about not having a certificate with the false-positives on the downloads. I can uninstall the cert if needed.

Offline Droll

  • Vice Admiral
  • **********
  • D
  • Posts: 1703
  • Thanked: 599 times
You should click proceed.

People complained about not having a certificate with the false-positives on the downloads. I can uninstall the cert if needed.

Erik whatever you did, all the images are now broken - including all the ribbons and emoticon/markdown stuff when writing a message. Idk what kind of cert your using but clearly its not helping, you'll need something else, but idk what that could be rn.
 

Offline Erik L

  • Administrator
  • Admiral of the Fleet
  • *****
  • Posts: 5654
  • Thanked: 366 times
  • Forum Admin
  • Discord Username: icehawke
  • 2020 Supporter 2020 Supporter : Donate for 2020
    2022 Supporter 2022 Supporter : Donate for 2022
    Gold Supporter Gold Supporter : Support the forums with a Gold subscription
    2021 Supporter 2021 Supporter : Donate for 2021
You should click proceed.

People complained about not having a certificate with the false-positives on the downloads. I can uninstall the cert if needed.

Erik whatever you did, all the images are now broken - including all the ribbons and emoticon/markdown stuff when writing a message. Idk what kind of cert your using but clearly its not helping, you'll need something else, but idk what that could be rn.

I see that. Working on reverting what I just did, but it is being stubborn.