[DrCaleb]

If you are close, could you push the 'Turbo' button?

[Hyack]

Everything looks to be okay to me, are there still issues?

[herbie]

?? Is MySQL on a different server? Always setup others and ran my boards on localhost. Never had this many SQL issues.
What version of phpBB?

[BartSimpson]

Interesting...I'm seeing ads on the site again.

[BartSimpson]

I picked up a little problem with the site certificate today. Seems there's a minor incongruity in the site details that's causing the valid security certificate to fail on some security checks.

Anyone see what I see?

$1:

HTTP/1.1 200 OK
Cache-Control: no-cache,no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Type: text/html
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: PHP/5.2.17
Set-Cookie: PHPSESSID=ju6k9l9cv9s0bvn384v99tvm17; path=/
X-Powered-By: ASP.NET
Date: Mon, 02 Oct 2017 12:51:00 GMT
Content-Length: 15818

Valid cert:

$1:

SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:94:ca:06:ae:d4:b8:a1:4d:e5:af:1d:b3:e4:7a:cd
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=hoth
Validity
Not Before: Jun 7 08:00:41 2017 GMT
Not After : Dec 7 08:00:41 2017 GMT
Subject: CN=hoth
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:a8:b4:66:66:77:48:c3:15:e1:b9:79:25:73:60:
ec:d9:ad:59:87:14:00:1e:53:a1:75:db:13:22:00:
71:fa:54:6e:8b:4e:bf:6f:97:7f:60:46:35:6a:32:
42:a7:3a:9f:d1:cc:6f:8c:55:84:fb:4f:94:11:52:
fb:ee:43:ac:30:87:45:ca:29:c8:44:b1:d2:37:90:
d0:67:8a:e6:e2:12:ef:76:0f:61:6f:3b:4b:38:ea:
13:dd:b4:62:17:45:4d:e7:40:2b:e4:52:c1:db:79:
08:17:52:c6:2a:10:d7:0d:3c:6a:11:af:2b:b6:63:
4e:5b:86:5c:bf:9a:d4:4a:1f:f5:ee:6e:90:b4:6f:
01:d9:96:d7:4e:13:dc:e4:8e:ab:da:52:07:e7:1f:
a1:7f:91:28:b3:15:15:56:79:43:08:d1:3f:1b:49:
71:0b:2e:18:a1:c9:82:bb:e0:74:f7:ce:84:b5:4e:
6e:5a:d4:ba:51:2a:64:68:58:a8:7d:c8:2a:2b:d6:
d1:07:d3:f9:07:78:f5:bf:f2:20:9c:c8:20:b0:ad:
09:a1:8a:e0:69:39:06:7f:5e:1e:0e:35:f2:01:40:
84:71:6f:e5:bf:a1:18:09:1c:f1:18:bc:61:b0:a7:
7b:a1:f5:0e:0f:22:30:52:69:c3:6d:13:a0:88:11:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Key Usage:
Key Encipherment, Data Encipherment
Signature Algorithm: sha1WithRSAEncryption
48:e8:34:92:be:61:cd:f8:23:38:06:81:4e:76:50:7f:c1:1a:
4a:0b:93:bf:38:28:92:9e:fa:4a:b4:8f:f9:fd:7c:97:93:5f:
fa:e9:7d:bf:5e:69:5f:20:50:ee:16:b6:77:3a:66:aa:89:e4:
4d:03:95:44:4d:3c:3e:b7:2c:d7:ee:68:14:aa:71:69:0c:e4:
cd:9d:d1:1b:2a:85:7e:23:bc:3b:b5:31:ce:dc:03:0c:62:97:
af:8e:11:ec:5c:39:11:b5:c3:fc:d2:ed:25:18:57:73:17:cb:
3f:dc:6a:bf:20:2f:10:b9:ba:e8:4f:a1:ef:ad:2f:31:6f:17:
fa:d2:99:e5:db:59:dd:71:3f:33:66:08:31:0d:5d:f3:1c:7e:
a3:4a:d8:c4:bf:a7:98:5c:60:77:b6:57:5a:4e:dd:cf:46:c3:
1b:57:2b:0e:d1:1e:8d:a7:92:4a:de:0b:ff:95:ff:79:64:29:
9a:2c:67:83:e0:a7:2c:1a:f7:81:7a:13:a8:66:3d:84:2e:1c:
55:0b:28:30:da:fe:f7:f5:da:42:0b:03:6a:4a:97:99:34:2b:
80:af:d5:1a:06:81:d4:e8:5d:a4:51:b3:dd:90:53:9b:05:0d:
4d:1f:45:5f:be:fb:78:d9:8b:85:64:77:d2:c5:ea:d0:9a:66:
aa:83:af:98

[DrCaleb]

BartSimpson BartSimpson:

I picked up a little problem with the site certificate today. Seems there's a minor incongruity in the site details that's causing the valid security certificate to fail on some security checks.

Anyone see what I see?

CKA isn't HTTPS? How are you seeing an SSL cert?

Do you have an internal firewall? Ours (F5) is designed to issue a fake-ish cert, and decrypt traffic before re-encrypting it back to the host site. That's why I post from this VM, because it's outside the firewall and beyond prying eyes. Mostly.

0:

CKA SSL.PNG [ 4.13 KiB | Viewed 433 times ]

[BartSimpson]

DrCaleb DrCaleb:

BartSimpson BartSimpson:

I picked up a little problem with the site certificate today. Seems there's a minor incongruity in the site details that's causing the valid security certificate to fail on some security checks.

Anyone see what I see?

CKA isn't HTTPS? How are you seeing an SSL cert?

Do you have an internal firewall? Ours (F5) is designed to issue a fake-ish cert, and decrypt traffic before re-encrypting it back to the host site. That's why I post from this VM, because it's outside the firewall and beyond prying eyes. Mostly.

0:

CKA SSL.PNG

All of that info is from my unshielded access on Shodan.

[DrCaleb]

That makes it even stranger.

Does it say who issued the SSL cert? "Issuer: CN=hoth" isn't helpful.

[BartSimpson]

Well...I'm left to wonder where the cert is coming from.

Google advertising maybe?

[Canadaka]

Fixed an issue that was only letting the homepage login cookie last 1 hour, it should be 6 months now.

Not sure why your getting that SSL cert stuff. the site is not HTTPS. But "Hoth" is the name of the main CKA server (they are star wars themed).

There is not really any certs on the server like that though. There was an FTP cert issued by Hoth, that expired in 2013! I removed it cleaning it up.

[DrCaleb]

Canadaka Canadaka:

Fixed an issue that was only letting the homepage login cookie last 1 hour, it should be 6 months now.

Thank you! Thank you! Thank you! Thank you!

That's been driving me nuts for months!

[DrCaleb]

I notice new categories on the front page for news items.

One possible side effect - images don't show up for those items any more.

[BartSimpson]

The ads are gone! Thanks, Trevor!

[Hyack]

DrCaleb DrCaleb:

I notice new categories on the front page for news items.

One possible side effect - images don't show up for those items any more.

I got Trev to add Indigenous to the topics, also want to add Nature or Wildlife and clean up a few topics. The pics not showing should be fixed pretty quick.....I hope!!

[Hyack]

DrCaleb DrCaleb:

Canadaka Canadaka:

Fixed an issue that was only letting the homepage login cookie last 1 hour, it should be 6 months now.

Thank you! Thank you! Thank you! Thank you!

That's been driving me nuts for months!

You and me both.....thank God that's fixed