Skip to content

LXDE.org HTTPS cert misconfigured #28

@arelyx

Description

@arelyx

On Chrome:

Your connection is not private
Attackers might be trying to steal your information from www.lxde.org (for example, passwords, messages, or credit cards). [Learn more about this warning](chrome-error://chromewebdata/#)
net::ERR_CERT_COMMON_NAME_INVALID

On curl:

~$ curl https://lxde.org
curl: (60) SSL: no alternative certificate subject name matches target hostname 'lxde.org'
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the webpage mentioned above.

Looking at the cert, the CN is set to *.github.io. I see that the site is hosted on Github pages, but directly hitting the Github pages link redirects to lxde.org. Once on lxde.org the cert should also point to lxde.org, not *.github.io.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions