topic Re: Security certificate (SSL) Fault in Everything else

Security certificate (SSL) Fault

tmd63 — Sun, 15 Sep 2024 13:21:34 GMT

Plusnet has generated a new SSL certificate and broken my website. It now refuses to go to my website but redirects to Plus.net instead! This has been going on since 8th Sept and I have been website-less for more than 7 days! FIX IT!

Re: Security certificate (SSL) Fault

Baldrick1 — Sun, 15 Sep 2024 14:58:17 GMT

Moderator's note:
Thread moved from Community Site Feedback to Everything Else

Re: Security certificate (SSL) Fault

paul_blitz — Sun, 15 Sep 2024 19:51:21 GMT

Suggest you phone the support team....

Re: Security certificate (SSL) Fault

RPMozley — Sun, 15 Sep 2024 22:18:22 GMT

Is it possible for you to provide the website link for others to do some checking?

Re: Security certificate (SSL) Fault

tmd63 — Mon, 16 Sep 2024 05:09:38 GMT

Try:
www.juton.co.uk
Or
www.lonewolf-enterprises.co.uk

Re: Security certificate (SSL) Fault

pvmb — Thu, 19 Sep 2024 13:09:36 GMT

Just had this while looking at Plusnet forum:

"Your connection isn't private
Attackers might be trying to steal your information from community.plus.net (for example, passwords, messages or credit cards).
NET::ERR_CERT_COMMON_NAME_INVALID"

Re: Security certificate (SSL) Fault

bobpullen — Thu, 19 Sep 2024 13:45:21 GMT

@tmd63 wrote:

Plusnet has generated a new SSL certificate and broken my website. It now refuses to go to my website but redirects to Plus.net instead! This has been going on since 8th Sept and I have been website-less for more than 7 days! FIX IT!

Not sure I understand?

Both of the URLs you posted seem to point to websites that are hosted on the Plusnet Homepages platform, which does not offer SSL unless you're incorporating URLs in the format https://homepages.plus.net/<username>...

Are you doing so? If not, I'm not sure what SSL certs have to do with anything.

I can reach both sites by the way. One displays a website, the other a server directory listing.

Re: Security certificate (SSL) Fault

paul_blitz — Mon, 23 Sep 2024 14:03:05 GMT

So, if you go to the PLAINTEXT versions of those sites, then they load as described above. If you manually type "https://..." then yes, there is an issue, the ssl certificate is issued to 'homepages.plus.net', which doesn't surprise me.

So, if a user just types your URL, then they will end up on your plaintext site.... noone will want to (unless testing!) waste time typing the "https://".

If you want to be more secure, then you need to set up the web server to do an http to https redirect, and get your own ssl certificate in place: assuming that you are using some free plusnet webspace, this may not actually be supported. Looking online, I see that home broadband users didn't get any webspace, whilst business users did. Of course, Plusnet no longer support business accounts, so like other things, I'll guess any web space support is also quietly dying.

So I'm thinking it's time for you to look at proper website hosting, you'll get a full control panel, and support to use SSL, and it needn't be expensive.

Re: Security certificate (SSL) Fault

bobpullen — Tue, 24 Sep 2024 14:00:13 GMT

@paul_blitz wrote:
If you want to be more secure, then you need to set up the web server to do an http to https redirect, and get your own ssl certificate in place: assuming that you are using some free plusnet webspace, this may not actually be supported.

It isn't.

The only way to serve content over HTTPS using the Plusnet Homepages platform is to use a URL that honours the SSL certificate i.e. https://homepages.plus.net/<pn_username>/<resource>

Re: Security certificate (SSL) Fault

paul_blitz — Tue, 24 Sep 2024 16:54:48 GMT

Sound like it *is* time to look for some new hosting. If your domain name's DNS is hosted by Plusnet, you probably need a new home for that too!

Re: Security certificate (SSL) Fault

tmd63 — Tue, 24 Sep 2024 19:58:42 GMT

The problem is this has been a working up until a week prior ago and the domain if a free domain hosted by Plusnet with the domain name is free. Google was indexing my pages for searches. They are only the http not https

Re: Security certificate (SSL) Fault

tmd63 — Sun, 29 Sep 2024 21:39:51 GMT

This is the exact fault I am seeing and it appears all my cgi-bin file return the same 404 error to google who are trying to index 11 pages within my cgi-bin folder

http://www.lonewolf-enterprises.co.uk/cgi-bin/newfile.htm is one such file location and firefox just returns 404, but other browsers jump to the plusnet website instead. This means that plusnet has been getting my site traffic.

Maybe it is time to get my own webserver running and email server for the unlimited emails.

Re: Security certificate (SSL) Fault

tmd63 — Sun, 06 Oct 2024 19:03:16 GMT

It turns out the CGI space server is or appears dead. I cannot access the CGI server.

Re: Security certificate (SSL) Fault

Townman — Tue, 08 Oct 2024 13:12:47 GMT

@bobpullen

Is there a cgi service name resolution issue here?

Setting aside discussion on if the OP's cgi URL above is correct - though I can access my (not really used) cgi portal at https://hosting.plus.net/portal ... I cannot resolve http://cgi.<username>.plus.com/

Nslookup reports the domain as non-existent.

I do not recall if this ever worked for (or was used in 'anger' by) me and that is why it is not working ... or is there an issue with the cgi. subdomain registration / resolution?

It is not helpful that the rich history on cgi held in this community has been achieved - otherwise I might have been able to research the answer myself.

Re: Security certificate (SSL) Fault

paul_blitz — Tue, 08 Oct 2024 13:29:36 GMT

As I said before, I'd be looking for a new web hosting site, one that is actually supported and has a future.

Also get any domain names moved to a site that actively supports them (there's plenty to choose from, I use names.co.uk, who also it seems do web hosting and email).