Problem Summary:

  1. 209.197.123.153 is configured with a certificate issued for dns entries matching *.pairsite.com
  2. perlmonks.(com|net|org) have an A record pointing to 209.197.123.153

As a consequence, whenever one is directed to the pairsite mirror, one gets a security warning, because the subject alternative name in the certificate, does not match the dns name used for contacting the host.

Possible solutions:

  1. configure the pairsite mirror to use the letsencrypt certificate
  2. remove 209.197.123.153 for the dns entries where its certificate does not match (perlmonks.com,perlmonks.net,perlmonks.org,...)

I love this site. I greatly appreciate the effort put into this site by the volunteer administrators. This problem however annoys me quite a bit. I want to see it fixed. I therefore volunteer to fix it. This would however require trusting me with the credentials required for the changes. I am offering my time, in case this is the limiting factor. If anybody else fixes it, i am also very happy. As an alternative solution i offer a beer to the person who fixes it ;).

Details: 

rminner@hamster530:~$ date
Mi 27. Jun 23:08:54 CEST 2018
rminner@hamster530:~$ for i in `dig +short perlmonks.org`; do echo -en
+ "$i: \n\t" ; echo "Q" | openssl s_client -connect $i:443 2> /dev/nul
+l| openssl x509 -text -noout  | sed -n '/X509v3 Subject Alternative N
+ame/{n;s/^\s*//;s/, /\n\t/g;p;}'; done
216.92.34.251: 
        DNS:css.perlmonks.com
        DNS:css.perlmonks.net
        DNS:css.perlmonks.org
        DNS:perlmonks.com
        DNS:perlmonks.net
        DNS:perlmonks.org
        DNS:www.perlmonks.com
        DNS:www.perlmonks.net
        DNS:www.perlmonks.org
66.39.54.27: 
        DNS:css.perlmonks.com
        DNS:css.perlmonks.net
        DNS:css.perlmonks.org
        DNS:perlmonks.com
        DNS:perlmonks.net
        DNS:perlmonks.org
        DNS:www.perlmonks.com
        DNS:www.perlmonks.net
        DNS:www.perlmonks.org
209.197.123.153: 
        DNS:*.pairsite.com
        DNS:pairsite.com
rminner@hamster530:~$

[download]

In reply to Re: This site is not secure continues by rminner
in thread This site is not secure continues by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.