https://bugzilla.redhat.com/show_bug.cgi?id=2252499
Bug ID: 2252499 Summary: problem with ask.fedoraproject.org cert Product: Fedora Documentation Version: devel Status: NEW Component: homepage Assignee: pbokoc@redhat.com Reporter: stanley.king@acm.org QA Contact: docs-qa@lists.fedoraproject.org CC: dimitris@glezos.com, zach@oglesby.co Target Milestone: --- Classification: Fedora
Description of problem:
Mozilla Firefox and Google Chrome forbid navigation to ask.fedoraproject.org, due to its cert being for *.discourse.org. No override is available.
Version-Release number of selected component (if applicable):
not applicable
How reproducible: often
Steps to Reproduce:
1. Connect to https://fedoraproject.org/start 2. click on ask.fedoraproject.org in the "Latest Solved Issues" listing 3. An error page results
Actual results:
Mozilla Firefox: "Firefox does not trust this site because it uses a certificate that is not valid for ask.fedoraproject.org. The certificate is only valid for *.discourse.org." It's possible to view the certificate. Its issuer is Let's Encrypt, and it's valid from 23 Oct 2023 to 21 Jan 2024.
Google Chrome: Less precise information is available. Error "NET::ERR_CERT_COMMON_NAME_INVALID" is issued. It also says, "When Chrome tried to connect to ask.fedoraproject.org this time, the website sent back unusual and incorrect credentials." and "You cannot visit ask.fedoraproject.org right now because the website uses HSTS."
Expected results:
I would expect this would bring me to the site where Fedora users discuss Fedora.
Additional info:
https://bugzilla.redhat.com/show_bug.cgi?id=2252499
Christopher Klooz py0xc3@posteo.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |py0xc3@posteo.net
--- Comment #1 from Christopher Klooz py0xc3@posteo.net --- Thanks for the report! Indeed something we need to solve
I can confirm the issue with firefox (SSL_ERROR_BAD_CERT_DOMAIN because of *.discourse.org). It is only the forwarding of ask.fedoraproject.org that does not work. The actual page is https://discussion.fedoraproject.org/c/ask/, which works fine (ask.fp is only a forwarding to the latter as of today).
But this issue does not belong to Docs.
I have forwarded this to admin@fedoraproject.org to handle this. They might take over, or forward it if https/dns issues belong to someone else.
For now, you can use the direct link to https://discussion.fedoraproject.org/c/ask
https://bugzilla.redhat.com/show_bug.cgi?id=2252499
--- Comment #2 from Christopher Klooz py0xc3@posteo.net --- Related discussion.fp topic: https://discussion.fedoraproject.org/t/forwarding-from-ask-fp-org-to-discuss...
---
The issue is forwarded and will be handled by another team.
This ticket can be closed.
Thanks again for reporting!
https://bugzilla.redhat.com/show_bug.cgi?id=2252499
Petr Bokoc pbokoc@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Doc Type|--- |If docs needed, set a value Resolution|--- |CANTFIX Status|NEW |CLOSED Last Closed| |2024-05-21 10:49:28
docs-qa@lists.fedoraproject.org