[platform-coop-dev-kit] URGENT: Site is down/a security warning prevents users from accessing it

[Damien Norris]

Hi all, sorry about that!

It turns out that when we put your site live we copied over the current LetsEncrypt SSL cert from the old server, and then that ran out.

LetsEncrypt is a free service for SSL certificates.  It's hugely popular because it's free, but you get what you pay for unfortunately.  It's very fragile with constantly moving parts in order for teh cert to stay working.  for some unknown reason they settled on 3 months as the max that a cert can live for (versus 1 or 2 years when you purchase them properly).

Because of that we recommend always buying a real cert, they are cheap ($25/yr) and they never break once they are installed until the expiry date which we know and expect, plus the SSl vendor warns us repeatedly by email as well.

So for now I've renewed another LetsEncrypt free cert for you - that fixed the warning and will be good for three months.  In one of the maintenance windows coming up this week we iwll replace that with a Real Cert, that will then be absolutely bomb-proof for 2 years until it's renewal time.

Sorry about that little mixup, we should have re-issued a fresh LetsEncrypt for it when we moved it, which would have then set up the auto-renewal process that happens every 2m onths.

D.

--
Damien Norris
Director / Network Administrator
CanTrust Hosting Co-operative <https://cantrusthosting.coop/>

Office: 312 Main Vancouver BC V6A 2T2
Phone: 778-374-3214 ext 101
Cel: 604-339-7412





I respectfully acknowledge that I live and work on unceded and traditional territories of the xʷməθkʷəy̓əm (Musqueam), Sḵwx̱wú7mesh Úxwumixw (Squamish), and səl̓ilw̓ətaʔɬ (Tsleil-Waututh) Nations.




> On Oct 14, 2019, at 9:59 AM, Trebor Scholz <scholzt at newschool.edu> wrote:
> 
> 
> I spoke with Damien and he is on it.
> Thanks, all.
> ~ Trebor
> 
> ___________________________________________
> R. TREBOR SCHOLZ
> Director, Platform Cooperativism Consortium
> Associate Professor 
> THE NEW SCHOOL
> 79 5th Ave 16th floor, Rm. 1601 
> New York, NY 10003
> 
> Open Society Foundation Fellow
> Rutgers SMLR Faculty Associate
> @trebors | @platformcoop 
> http://platform.coop <http://platform.coop/>
> 
> 
> Register now <https://www.eventbrite.com/e/who-owns-the-world-the-state-of-platform-cooperativism-tickets-65115552370?utm-medium=discovery&utm-campaign=social&utm-content=attendeeshare&aff=escb&utm-source=cp&utm-term=listing>
> 
> 
> On Mon, Oct 14, 2019 at 12:50 PM Zimmerman, Ned <nzimmerman at ocadu.ca <mailto:nzimmerman at ocadu.ca>> wrote:
> Hi Damien,
> 
>  
> 
> It appears that the SSL certificate to replace LetsEncrypt was never set up and the certificate has expired. Can you address this ASAP?
> 
>  
> 
> Thanks,
> 
> Ned
> 
> —
> 
> Ned Zimmerman
> 
> Senior Inclusive Developer
> 
> Inclusive Design Research Centre, OCAD University
> 
> https://idrc.ocadu.ca <https://idrc.ocadu.ca/>
>  
> 
> From: Trebor Scholz <scholzt at newschool.edu <mailto:scholzt at newschool.edu>>
> Date: Monday, October 14, 2019 at 10:47 AM
> To: "Zimmerman, Ned" <nzimmerman at ocadu.ca <mailto:nzimmerman at ocadu.ca>>, Platform Coop Dev Kit <platform-coop-development-kit at lists.inclusivedesign.ca <mailto:platform-coop-development-kit at lists.inclusivedesign.ca>>
> Subject: Site is down/a security warning prevents users from accessing it
> 
>  
> 
> Hi Ned,
> 
> I'll submit this on Github, too, but I felt you should see this right away. The site is down- a security warning prevents users from accessing it.
> 
>  
> 
> Best,
> 
> Trebor
> 
>  
> 
> ---------- Forwarded message ---------
> From: Danny Spitzberg <stationaery at gmail.com <mailto:stationaery at gmail.com>>
> Date: Mon, Oct 14, 2019 at 12:37 PM
> Subject: #platformcoop site security warning
> To: Michael McHugh <mchughm at newschool.edu <mailto:mchughm at newschool.edu>>, Trebor Scholz <scholzt at newschool.edu <mailto:scholzt at newschool.edu>>, Angela Difede <difedea at newschool.edu <mailto:difedea at newschool.edu>>
> 
>  
> 
> Hi, friends- FYI, I'm seeing this alert on all pages for https://platform.coop <https://platform.coop/>:
> 
>  
> 
> <image001.png>
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.inclusivedesign.ca/pipermail/platform-coop-development-kit/attachments/20191014/6624c017/attachment-0005.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cantrust_email.png
Type: image/png
Size: 3041 bytes
Desc: not available
URL: <http://lists.inclusivedesign.ca/pipermail/platform-coop-development-kit/attachments/20191014/6624c017/attachment-0005.png>