Recent

Author Topic: Chrome: Certificate Date Invalid  (Read 3882 times)

440bx

  • Hero Member
  • *****
  • Posts: 4037
Chrome: Certificate Date Invalid
« on: September 30, 2021, 05:29:31 pm »
Google Chrome started complaining about the Lazarus forum being "insecure" because its certificate date is "invalid".

Is this problem something I have to solve on my end or is there really a problem with the certificate ?

also, has anyone else run into that problem ?

Thank you.
(FPC v3.0.4 and Lazarus 1.8.2) or (FPC v3.2.2 and Lazarus v3.2) on Windows 7 SP1 64bit.

Martin_fr

  • Administrator
  • Hero Member
  • *
  • Posts: 9874
  • Debugger - SynEdit - and more
    • wiki
Re: Chrome: Certificate Date Invalid
« Reply #1 on: September 30, 2021, 06:05:23 pm »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)
« Last Edit: September 30, 2021, 06:07:26 pm by Martin_fr »

ASerge

  • Hero Member
  • *****
  • Posts: 2242
Re: Chrome: Certificate Date Invalid
« Reply #2 on: September 30, 2021, 06:16:39 pm »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)
Chrome on Android says that the certificate is for forum.lazarus.freepascal.org valid until 2021-12-07.

440bx

  • Hero Member
  • *****
  • Posts: 4037
Re: Chrome: Certificate Date Invalid
« Reply #3 on: September 30, 2021, 07:15:13 pm »
It must be my Chrome installation. 

If it doesn't stop doing that real soon, I'm going to switch to another browser.

Thank you for the info.
(FPC v3.0.4 and Lazarus 1.8.2) or (FPC v3.2.2 and Lazarus v3.2) on Windows 7 SP1 64bit.

trev

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2020
  • Former Delphi 1-7, 10.2 user
Re: Chrome: Certificate Date Invalid
« Reply #4 on: October 01, 2021, 12:15:59 am »
On 30 Sep 2021 the R3 signed by the DST Root CA X3 intermediate certificate expired as planned by Lets Encrypt. If you experience problems related to certificate chaining you should first review your configuration and make sure your server/website/device is sending the correct chain with the updated R3 intermediate certificate signed by ISRG Root X1.

My web browsers on FreeBSD (SeaMonkey) and macOS (Safari) were fine, but Apple Mail had "expired certificate" issues with my FreeBSD POP mail server which required me to download the new R3 updated intermediate certificate and install it in my macOS keychain. That certificate is available from post #121 in this thread over at the Lets Encrypt Forum.
« Last Edit: October 01, 2021, 12:18:06 am by trev »

440bx

  • Hero Member
  • *****
  • Posts: 4037
Re: Chrome: Certificate Date Invalid
« Reply #5 on: October 01, 2021, 03:51:17 am »
Thank you for that additional information Trev.

After about 20 mins trying to unsuccessfully solve the problem, I decided I didn't want to deal with it.  Got better things to do.  Instead I installed Firefox, it doesn't complain and does the job as it's supposed to. 

Problem solved !! 
(FPC v3.0.4 and Lazarus 1.8.2) or (FPC v3.2.2 and Lazarus v3.2) on Windows 7 SP1 64bit.

Marc

  • Administrator
  • Hero Member
  • *
  • Posts: 2584
Re: Chrome: Certificate Date Invalid
« Reply #6 on: October 01, 2021, 09:45:13 am »
For me Chrome and Firefox both report on issue at all.

Since it is LetsEncrypt, I assume it gets update regularly.
So maybe it was a temp issues (I don't have access to check)

The certificates are automatically updated one or two weeks before they expire
//--
{$I stdsig.inc}
//-I still can't read someones mind
//-Bugs reported here will be forgotten. Use the bug tracker

 

TinyPortal © 2005-2018