Recent

Author Topic: Chrome: Certificate Date Invalid  (Read 2392 times)

440bx

  • Hero Member
  • *****
  • Posts: 2547
Chrome: Certificate Date Invalid
« on: September 30, 2021, 05:29:31 pm »
Google Chrome started complaining about the Lazarus forum being "insecure" because its certificate date is "invalid".

Is this problem something I have to solve on my end or is there really a problem with the certificate ?

also, has anyone else run into that problem ?

Thank you.
FPC v3.0.4 and Lazarus 1.8.2 on Windows 7 64bit.

Martin_fr

  • Administrator
  • Hero Member
  • *
  • Posts: 7512
  • Debugger - SynEdit - and more
    • wiki
Re: Chrome: Certificate Date Invalid
« Reply #1 on: September 30, 2021, 06:05:23 pm »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)
« Last Edit: September 30, 2021, 06:07:26 pm by Martin_fr »

ASerge

  • Hero Member
  • *****
  • Posts: 1886
Re: Chrome: Certificate Date Invalid
« Reply #2 on: September 30, 2021, 06:16:39 pm »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)
Chrome on Android says that the certificate is for forum.lazarus.freepascal.org valid until 2021-12-07.

440bx

  • Hero Member
  • *****
  • Posts: 2547
Re: Chrome: Certificate Date Invalid
« Reply #3 on: September 30, 2021, 07:15:13 pm »
It must be my Chrome installation. 

If it doesn't stop doing that real soon, I'm going to switch to another browser.

Thank you for the info.
FPC v3.0.4 and Lazarus 1.8.2 on Windows 7 64bit.

trev

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1679
  • Former Delphi 1-7, 10.2 user
Re: Chrome: Certificate Date Invalid
« Reply #4 on: October 01, 2021, 12:15:59 am »
On 30 Sep 2021 the R3 signed by the DST Root CA X3 intermediate certificate expired as planned by Lets Encrypt. If you experience problems related to certificate chaining you should first review your configuration and make sure your server/website/device is sending the correct chain with the updated R3 intermediate certificate signed by ISRG Root X1.

My web browsers on FreeBSD (SeaMonkey) and macOS (Safari) were fine, but Apple Mail had "expired certificate" issues with my FreeBSD POP mail server which required me to download the new R3 updated intermediate certificate and install it in my macOS keychain. That certificate is available from post #121 in this thread over at the Lets Encrypt Forum.
« Last Edit: October 01, 2021, 12:18:06 am by trev »
Lazarus 2.3, FPC 3.3.1 macOS 12.0.1 x86_64 Xcode 13.1
Lazarus 2.3, FPC 3.3.1 macOS 12.0.1 aarch64 Xcode 13.1
Lazarus 2.3, FPC 3.2.2 FreeBSD 13.0 amd64 VM
Lazarus 2.3, FPC 3.2.2 FreeBSD 12.2 amd64 VM
Lazarus 2.1 r61574 FPC 3.0.4 Ubuntu 20.04 VM
Lazarus 2.0.10 FPC 3.2.0 Win10 VM

440bx

  • Hero Member
  • *****
  • Posts: 2547
Re: Chrome: Certificate Date Invalid
« Reply #5 on: October 01, 2021, 03:51:17 am »
Thank you for that additional information Trev.

After about 20 mins trying to unsuccessfully solve the problem, I decided I didn't want to deal with it.  Got better things to do.  Instead I installed Firefox, it doesn't complain and does the job as it's supposed to. 

Problem solved !! 
FPC v3.0.4 and Lazarus 1.8.2 on Windows 7 64bit.

Marc

  • Administrator
  • Hero Member
  • *
  • Posts: 2531
Re: Chrome: Certificate Date Invalid
« Reply #6 on: October 01, 2021, 09:45:13 am »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)

The certificates are automatically updated one or two weeks before they expire
//--
{$I stdsig.inc}
//-I still can't read someones mind
//-Bugs reported here will be forgotten. Use the bug tracker

 

TinyPortal © 2005-2018