Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2018-02-25, 13:59:37

Author Topic: Self signed, Google WNC-606601 and Let's Encrypt  (Read 639 times)

0 Members and 1 Guest are viewing this topic.

Offline idove

  • Valuable Member
  • *
  • Posts: 97
  • Karma: +0/-0
    • View Profile
Self signed, Google WNC-606601 and Let's Encrypt
« on: 2017-09-09, 20:23:39 »
Should I worry? What that means?

Message received from google:
---
Google has detected that the SSL/TLS certificate used on https://my-domain.com/  is self-signed, which means that it was issued by your server rather than by a Certificate Authority. Because only Certificate Authorities are considered trusted sources for SSL/TLS certificates, your certificate cannot be trusted by most of the browsers. In addition, a self-signed certificate means that your content is not authenticated, it can be modified, and your user’s data or browsing behavior can be intercepted by a third-party. As a result, many web browsers will block users by displaying a security warning message when your site is accessed. This is done to protect users’ browsing behavior from being intercepted by a third party, which can happen on sites that are not secure.

Recommended Action:
Get a new certificate
To correct this problem, you need to get a new, dedicated SSL/TLS certificate from a trusted Certificate Authority (CA). This certificate must match your complete site URL, or be a wildcard certificate that can be used for multiple subdomains on a domain.
Need more help?
•   Learn more about SSL certificate problems.
•   Read our article on How to secure your site with HTTPS in our Help Center.
•   Ask questions in our forum for more help - mention message type [WNC-606601]
---

Thank you.

Online MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Self signed, Google WNC-606601 and Let's Encrypt
« Reply #1 on: 2017-09-10, 02:23:14 »
Use letsencrypt ssl feature in Kloxo-MR 7.0.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline idove

  • Valuable Member
  • *
  • Posts: 97
  • Karma: +0/-0
    • View Profile
Re: Self signed, Google WNC-606601 and Let's Encrypt
« Reply #2 on: 2017-09-10, 10:40:42 »
Use letsencrypt ssl feature in Kloxo-MR 7.0.

Don't understand what do you mean by that?

I used SSL certificate on kloxo MR web admin with clicking on "Add Let's Encrypt", and then after few hours I get message from Google.
Should I mannualy add SSL using Let's Encrypt?

Anyway this is particular domain for which google has informed me is:
https://moje-podjetje.net

Note:
In .htaccess I do have redirect http > https, and all non-www, to www.

Online MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
Re: Self signed, Google WNC-606601 and Let's Encrypt
« Reply #3 on: 2017-09-10, 10:53:55 »
Your domain already use letsencrypt and running well. So, update your browser and also clear browser cache and history!.
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Online MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline idove

  • Valuable Member
  • *
  • Posts: 97
  • Karma: +0/-0
    • View Profile
Re: Self signed, Google WNC-606601 and Let's Encrypt
« Reply #5 on: 2017-09-10, 11:07:34 »
Check your ssl with https://www.sslshopper.com/ and https://www.ssllabs.com/ssltest/

Tnx, but already I checked before I was posting this post on this forum.
I received this message from Google, from Webmaster tools on Google to my gmail (webmaster tools) account.

Also find that some people have the same problem using Let's Encrypt and getting this message.
Try to search google with:

Code: [Select]
"[WNC-606601]" let's encrpyt

Online MRatWork

  • Administrator
  • The Elite
  • *****
  • Posts: 15,381
  • Karma: +113/-9
  • Gender: Male
    • View Profile
    • MRatWork Forum
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

Offline idove

  • Valuable Member
  • *
  • Posts: 97
  • Karma: +0/-0
    • View Profile
Re: Self signed, Google WNC-606601 and Let's Encrypt
« Reply #7 on: 2017-09-10, 11:52:04 »
Not sure if I understand what you reffering.
Maybe it is problem from redirecting non-www to www?
Or from redirecting all http to https with 301?


I mean in Google webmaster tools I'm having 4 inputs for the same domain, and only complaint for https://example.com

http://example.com
http://www.example.com
https://example.com
https://www.example.com

Also, I have 301 redirect in my .htaccess.
- first redirect all http to https
- then redirect all non-www to www

Code: [Select]
RewriteEngine On

RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

RewriteCond %{HTTP_HOST} ^example.com
RewriteRule (.*) https://www.example.com/$1 [R=301,L]
« Last Edit: 2017-09-10, 12:44:39 by idove »

 


Top 10 Social Networking:    Facebook    Twitter    LinkedIn    Pinterest    Google Plus    Tumblr    Instagram    VK    Flickr    Vine

Page created in 0.046 seconds with 19 queries.

web stats analysis