Security Certificate

Quick update on the security certificate issue:

As some of you may have seen, the site security certificate is being rejected by some browsers. Many people are having issues with Firefox, but can access the site with Chrome or Edge... while others are having problems with most/all browsers.

The source of this problem stems with something that the organization "Let's Encrypt" did this week. They discovered a vulnerability in their encryptions and chose to revoke ALL certificates that used that protocol. That includes the one we were using. As a result, browsers reacted by rejecting not the individual certificates but rather the issuer (Let's Encrypt). So even though people have updated certificates, some browsers are still rejecting the issuer.

Or... that's what I've gathered, so far.

I have run the corrections to update our certificate. However, there are still issues.

I'm hoping that its a matter of propagation and a fix on Firefox's part... but if not, I'll continue to monitor the situation over the weekend. Worst case scenario, I'll have to manually revoke and remove our existing certificates and start from scratch... and maybe use an issuer other than Let's Encrypt. Which could cost us some money, unfortunately. At least Let's Encrypt is free.

Either way. Known issue and somewhat out of our hands. Hopefully it's fixed and its just a matter of time... if not, more will be made clear as the communities involved raise loud voices insisting that fixes be made. If that's the case, I'll get it resolved when I can... but at the moment, it will either happen on its own... or it'll have to wait until Sunday or Monday when I have time.

Cross fingers.

Soo.. ya. Problem did not solve itself.

SO... I have manually rooted out the old certificates and set up, bypassed the automation, kicked people around at bitnami... and set up new Let's Encrypt certificates. The site 'should' now be accessible by all browsers. Let me know if anyone is still running into problems or if my solution appears to have caused any side effects. I 'think' we're good... but.. its been a long day so... who knows.