1. Welcome to Jetboaters.net!

    We are delighted you have found your way to the best Jet Boaters Forum on the internet! Please consider Signing Up so that you can enjoy all the features and offers on the forum. We have members with boats from all the major manufacturers including Yamaha, Seadoo, Scarab and Chaparral. We don't email you SPAM, and the site is totally non-commercial. So what's to lose? IT IS FREE!

    Membership allows you to ask questions (no matter how mundane), meet up with other jet boaters, see full images (not just thumbnails), browse the member map and qualifies you for members only discounts offered by vendors who run specials for our members only! (It also gets rid of this banner!)

    free hit counter

possible ssl cert issue coming...

Discussion in 'Forum Feature, Rules, Communication Requests' started by Ridesteady, Mar 15, 2017.

  1. Ridesteady

    Ridesteady Member

    Messages:
    18
    Ratings:
    +31 / 1
    Boat Make:
    Yamaha
    Year:
    2006
    Boat Model:
    SX
    Boat Length:
    21
    Hey @Bruce @Julian ,

    I just wanted to let you know that I (accidentally) upgraded to Google Chrome 57 (if you use Chrome and go to Help -> About Google Chrome, it will automatically update).

    When I did that, jetboaters.net and a few other sites I visited kept throwing "Privacy Errors". Upon further investigation, it seems that certs signed by two authorities are being phased out (see information below).

    Just wanted to give you a heads up before Chrome 57 is rolled out to everyone.

    HTH!
    -Justin

    PS. We use ClickSSL for our certs. Dirt cheap, with a GeoTrust root.

    chrome_error2.JPG

    The error is because those websites are still using old no-longer trusted security certificate issued by StartCom. For more details see:
    https://security.googleblog.com/2016/10/distrusting-wosign-and-startcom.html - Distrusting WoSign and StartComCertificates
    Google has determined that two CAs, WoSign and StartCom, have not maintained the high standards expected of CAs and will no longer be trusted by Google Chrome, in accordance with our Root Certificate Policy. This view is similar to the recent announcements by the root certificate programs of both Apple and Mozilla.
    Beginning with Chrome 56, certificates issued by WoSign and StartCom after October 21, 2016 00:00:00 UTC will not be trusted. Certificates issued before this date may continue to be trusted, for a time, if they comply with the Certificate Transparency in Chrome policy or are issued to a limited set of domains known to be customers of WoSign and StartCom.
    In subsequent Chrome releases, eg. Chrome 57 and later, these exceptions will be reduced and ultimately removed, culminating in the full distrust of these CAs. This staged approach is solely to ensure sites have the opportunity to transition to other Certificate Authorities that are still trusted in Google Chrome, thus minimizing disruption to users of these sites. Sites that find themselves on this whitelist will be able to request early removal once they’ve transitioned to new certificates. Any attempt by WoSign or StartCom to circumvent these controls will result in immediate and complete removal of trust.
    Google remains committed to ensuring the safety and privacy of Google Chrome users. We appreciate the impact to users visiting sites with affected certificates and to the operators who run these sites, but the nature of these incidents, and the need to protect our users, prevent us from being able to take less disruptive steps.
    You can help by contacting the affected website owner/administrators, and tell them to get new security certs from other trusted CAs.
     
    • Like Like x 1
    • Agree Agree x 1
  2. Andy S

    Andy S Jetboaters Admiral

    Messages:
    2,397
    Location:
    Chapin, SC 29036
    Ratings:
    +2,520 / 31
    Boat Make:
    Cobalt
    Year:
    2016
    Boat Model:
    Other
    Boat Length:
    26
    • Like Like x 3
  3. Bruce

    Bruce Jetboaters Fleet Admiral Staff Member Administrator

    Messages:
    9,718
    Location:
    Royal, AR
    Ratings:
    +8,775 / 49
    Boat Make:
    Yamaha
    Year:
    2007
    Boat Model:
    SX
    Boat Length:
    23
    @Ridesteady, I had the same issue last night. I installed a new certificate from https://letsencrypt.org which is a free signing authority. They issue certificates for 90 days but have a tool that can be used to automatically renew which is more convenient than having to remember to renew every year.
     
    • Like Like x 3
  4. Ridesteady

    Ridesteady Member

    Messages:
    18
    Ratings:
    +31 / 1
    Boat Make:
    Yamaha
    Year:
    2006
    Boat Model:
    SX
    Boat Length:
    21
    haha - you can't beat free! The forum runs beautifully on my chrome 57 now. :D
     
    • Love It Love It x 2
    • Like Like x 1

Share This Page