Page 2 of 2

Re: "Untrusted certificate" - Just wait or what to do?

Posted: January 22nd, 2021, 11:34 am
by sander
Ah, good news: they have solved it:

Code: Select all

sander@brixit:~/git/testssl.sh$ ./testssl.sh -S --ip 185.90.196.97  news.newshosting.com

 Certificate Validity (UTC)   74 >= 30 days (2021-01-06 21:42 --> 2021-04-06 22:42)

That's same certificate-date as on 185.90.196.129, so they probably now copied, thanks to your message... Did you hear back from them?

Re: "Untrusted certificate" - Just wait or what to do?

Posted: January 22nd, 2021, 12:38 pm
by iUseNetter
I just got a ticket# and a standard bot text with my original message and something like " A Support Agent will reply as soon as possible. .."

I think, the most important thing is: They fixed it. ;)

Thanks again for your valuable support!

Re: "Untrusted certificate" - Just wait or what to do?

Posted: January 22nd, 2021, 12:43 pm
by sander
I ran another test, this time on secure.eu.thundernews.com, grepping for RED alerts (=code 31m)

Code: Select all


./testssl.sh secure.eu.thundernews.com:nntps > secure.eu.thundernews.com.COLORED.txt


cat secure.eu.thundernews.com.COLORED.txt | grep -e 31m -e Start | sed -e "s/31//g" | sed -e "s/Start/\nStart/"
 
Start 2021-01-22 18:17:51        -->> 185.90.196.133:nntps (secure.eu.thundernews.com) <<--
   Chain of trust               NOT ok (expired)
   Certificate Validity (UTC)   expired (2020-06-10 20:32 --> 2020-09-08 20:32)
 Overall Grade                T
 
Start 2021-01-22 18:20:18        -->> 185.90.196.69:nntps (secure.eu.thundernews.com) <<--
 LOW: 64 Bit + DES, RC[2,4], MD5 (w/o export)      offered (NOT ok)
 RC4 (CVE-2013-2566, CVE-2015-2808)        VULNERABLE (NOT ok): RC4-SHA 
 Overall Grade                T
 
Start 2021-01-22 18:22:55        -->> 185.90.196.101:nntps (secure.eu.thundernews.com) <<--
 Overall Grade                T

 
So ... same problem: expired certificate on 185.90.196.133

Re: "Untrusted certificate" - Just wait or what to do?

Posted: January 23rd, 2021, 12:32 am
by SABfaninAus
Thanks for the investigation sander.
I raised a ticket with ThunderNews letting them know about the expired certificate for that IP address.
Cheers,
SABfaninAus

Re: "Untrusted certificate" - Just wait or what to do?

Posted: January 23rd, 2021, 5:12 am
by sander
I ran the test again on secure.eu.thundernews.com, and everything looks OK. So ... or thundernews.com solved it or was already solving it, or there is something intermittent, or I do something wrong

Code: Select all

sander@witte2004:~/git/testssl.sh$ time ./testssl.sh secure.eu.thundernews.com:nntps > secure.eu.thundernews.com.COLORED-BLA-full.txt

real	7m40,601s
user	3m16,047s
sys	2m56,480s
sander@witte2004:~/git/testssl.sh$ cat secure.eu.thundernews.com.COLORED-BLA-full.txt | grep -e 31m -e Start | sed -e "s/31//g" | sed -e "s/Start/\nStart/"
 
Start 2021-01-23 10:58:39        -->> 185.90.196.101:nntps (secure.eu.thundernews.com) <<--
 
Start 2021-01-23 11:00:59        -->> 185.90.196.69:nntps (secure.eu.thundernews.com) <<--
 
Start 2021-01-23 11:03:36        -->> 185.90.196.133:nntps (secure.eu.thundernews.com) <<--

Re: "Untrusted certificate" - Just wait or what to do?

Posted: October 1st, 2021, 6:07 pm
by meimeiriver
Problems with newshosting.com have resumed. As of today, their cert is invalid. They give you some BS about upgrading your OS (DSM 6.2.3-25423.)

Anyone else have this issue again? And no, using news.ams.newshosting.com didn't make a difference this time.

Re: "Untrusted certificate" - Just wait or what to do?

Posted: October 2nd, 2021, 1:00 am
by sander