.co.za EPP system cert expired

Web Telecom Services

Web Telecom Services

Company Representative
Company Rep
Joined
Dec 14, 2006
Messages
241
Reaction score
49
Anybody else noticed this (again). One would expect that those guys have a calender entry to renew the cert before it expires.

stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages:
error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
 
I take it back. There is definitely an issue. Its busy getting fixed now. Thank you for the heads up.
 
This for http://co.za? Doesn't auto redirect to https, if you do the certificate isn't "liked" by FF.
1590996161669.png
It is valid till the end of the month:
1590996194210.png
As you can see by the FF error, it says broken encryption, mainly that it uses TLS 1.0.
As of the end of April, near all the large players agreed to deprecate TLS 1.0, FF did make an allowance for up to v77 to still allow it: https://www.fxsitecompat.dev/en-CA/docs/2020/tls-1-0-1-1-support-has-been-removed/

More on it here: https://hacks.mozilla.org/2019/05/tls-1-0-and-1-1-removal-update/
1590996483671.png
 
Hi Jonathan. Its a specific hostname and port that is used by the EPP system - cert expired Saturday morning which is now affecting new registrations, renewals and domain sync operations. We do have a workaround to bypass the expired cert issue. Ill give them a call again to see if they attended to my email with the info.

Just thought Ill give you guys a heads in case you have EPP issues on your systems. Thanx Jade for also notifying them.
 
The certificate itself hasn't expired. There is an intermediary certificate in the chain that did expire on Saturday. Interestingly it seems only be detected on some systems. For example our version control box uses the same cert and its fine in all the browsers but Git is objecting. We watch cert dates as part of our monitoring process. Naturally that picked everything up as fine. We will update our monitoring to catch intermediary issues in future.

We are busy fixing now. Thank you very much to flbjhb and Jade for letting us know.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X