Topic: Invalid security certificate?

[Indofunk]

For some reason, in all my years of logging into Filmwasters, only today was I given a security error. Maybe it's because I used Firefox for the first time in years, but then when I tried Chrome it also threw up an error. The Firefox error is more verbose:

www.filmwasters.com uses an invalid security certificate. The certificate is only valid for the following names: abluebellforest.com, www.abluebellforest.com The certificate expired on Friday, April 28, 2017, 7:59 PM. The current time is Wednesday, September 20, 2017, 2:20 PM. Error code: SSL_ERROR_BAD_CERT_DOMAIN

So not only is the cert expired, but it's for a different domain Can we look into getting this fixed? FWIW, my hosting provider, Bluehost, offers free, autorenewing SSLs, and I know through my day job that Squarespace sites also have free, autorenewing SSLs through Let's Encrypt.

[Francois]

This is very strange...
We're already hosted by bluehost, so there shouldn't be a problem there.
Also, I'm on the site using firefox and everything looks OK... though I don't have the HTTPS everywhere plugin installed...

I'm going to check it out a bit and report back.

[Francois]

I just installed HTTPS everywhere and can't get the site to go into secure mode... hence no certificates are asked for.

[Indofunk]

What happens when you add https:// to the browser address for this page?

[Francois]

Yep, that does cause the problem you're talking about.

I'll get in touch with Ed and see what he thinks about it all

[Indofunk]

I wanted to revisit this because I just realized the same issue was happening on a couple of my personal sites. If we're on Bluehost and get free SSLs, then we just need to use those SSLs. In my case, since my sites are Wordpress sites, I just needed to add an SSL plugin that automatically loads the SSL. Looks like we're on Simple Machines, maybe there's an equivalent? Otherwise we'll have to install SSL manually via Apache, and there are lots of tutorials on that. I used to do it back in my programming days, but if I can just hit a button to install an SSL plugin, why bother?

[Francois]

I know. What saves trouble is definitely worth it.
AFAIK, Ed knows about the issue but is probably too busy with his teenagers to do anything about it.

Come to think of it, I haven't had any news from Ed in a long time. He even put his family's Tumblr private...