Still's Luger Forum

tenbears · 10-05-2019, 11:09 AM

Anybody else having this problem trying to access Still's Luger forum?
Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to luger.gunboards.com. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

Learn more…

rolandtg · 10-05-2019, 11:48 AM

It's a bad certificate error. This likely a configuration issue with the ISP who hosts the forums.

More info:

"What does this mean?

We were able to retrieve a certificate for this site, but the domain names listed in it do not match the domain name you requested us to inspect. It's possible that:

The web site does not use SSL, but shares an IP address with some other site that does.
The web site no longer exists, yet the domain name still points to the old IP address, where some other site is now hosted.
The web site uses a content delivery network (CDN) that does not support SSL.
The domain name is an alias for a web site whose main name is different, but the alias was not included in the certificate by mistake. "

"Why is my certificate not trusted?

There are many reasons why a certificate may not be trusted. The exact problem is indicated on the report card in bright red. The problems fall into three categories:

Invalid certificate
Invalid configuration
Unknown Certificate Authority

1. Invalid certificate

A certificate is invalid if:

It is used before its activation date
It is used after its expiry date
Certificate hostnames don't match the site hostname
It has been revoked
It has insecure signature
It has been blacklisted

2. Invalid configuration

In some cases, the certificate chain does not contain all the necessary certificates to connect the web server certificate to one of the root certificates in our trust store. Less commonly, one of the certificates in the chain (other than the web server certificate) will have expired, and that invalidates the entire chain.
3. Unknown Certificate Authority

In order for trust to be established, we must have the root certificate of the signing Certificate Authority in our trust store. SSL Labs does not maintain its own trust store; instead we use the store maintained by Mozilla.

If we mark a web site as not trusted, that means that the average web user's browser will not trust it either. For certain special groups of users, such web sites can still be secure. For example, if you can securely verify that a self-signed web site is operated by a person you trust, then you can trust that self-signed web site too. Or, if you work for an organisation that manages its own trust, and you have their own root certificate already embedded in your browser. Such special cases do not work for the general public, however, and this is what we indicate on our report card.
4. Interoperability issues

In some rare cases trust cannot be established because of interoperability issues between our code and the code or configuration running on the server. We manually review such cases, but if you encounter such an issue please feel free to contact us. Such problems are very difficult to troubleshoot and you may be able to provide us with information that might help us determine the root cause.

SSL Report v1.36.1"

mrerick · 10-05-2019, 01:43 PM

hi, I've posted about this separately:

http://forum.lugerforum.com/showthread.php?t=39913

Something on the forum servers has been mis-configured, or the site has been hijacked. I'm waiting until it's resolved until I log in there.

Moderators have notified the service provider of the problem.

HerrKaiser · 10-06-2019, 08:30 PM

Have the gunboard forums been restored to working order?

wlyon · 10-06-2019, 08:41 PM

No

Edward Tinker · 10-06-2019, 10:09 PM

If you read the certificate, it shows the luger gunboards and main gunboards, yet i don't get a warning from main gunboards.

I have left several notes and sent an email to one of the technical admins for gunboards

tenbears · 10-06-2019, 10:31 PM

I was a member of GermanDaggers.com for years and their site was flat out hacked and never returned. So I'm concern this isn't the same fate for Still's Luger forum.

Edward Tinker · 10-07-2019, 12:52 AM

Always a worry, although since the company that runs Gunboards does scores of forums, it’s likely most is backed up.

Norme · 10-07-2019, 07:45 AM

I logged in on Day 1 and have visited every day since, but then Danger is my middle name.
Norm

mrerick · 10-07-2019, 09:04 AM

The moderators reported the certificate problem to the Gunboards administrators on Saturday morning, and have not heard back yet.

The site is still serving with a certificate associated with a car collector group. I personally will not log into the site until the problem has been resolved, and am waiting to hear back from their administrators that it's been resolved.

Mac Cat · 10-07-2019, 10:38 AM

It seems OK today.

It did look like a bad certificate yesterday, but I didn't have any trouble today.

Sergio Natali · 10-07-2019, 11:52 AM

Not yet unfortunately.

mrerick · 10-07-2019, 02:06 PM

I just checked and was able to loI just checked and was able to log into the Jan Still forum without a certificate error. Unfortunately, the certificate is still for the "200forum.com" Chrysler forum.

I am concerned that the site may have been hijacked.

Please don't log in until we confirm it's safe from the Gunboards administrators.

Vlim · 10-07-2019, 05:37 PM

Its been fixed. luger.gunboards.com has been added to the shared certificate as far as I can see.

mrerick · 10-08-2019, 09:13 AM

Sounds good to me. We are now listed as a "Alternate Name" on the certificate (which supports a large number of the forums this service provider supports).

The problem appears resolved.

Marc

10-05-2019, 11:09 AM	#1
tenbears User Join Date: Dec 2004 Posts: 370 Thanks: 3 Thanked 26 Times in 15 Posts	Still's Luger Forum Anybody else having this problem trying to access Still's Luger forum? Warning: Potential Security Risk Ahead Firefox detected a potential security threat and did not continue to luger.gunboards.com. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details. What can you do about it? The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem. Learn more…

10-05-2019, 01:43 PM	#3
mrerick Super Moderator - Patron LugerForum Life Patron Join Date: Dec 2009 Location: Eastern North Carolina, USA Posts: 3,900 Thanks: 1,370 Thanked 3,094 Times in 1,503 Posts	hi, I've posted about this separately: http://forum.lugerforum.com/showthread.php?t=39913 Something on the forum servers has been mis-configured, or the site has been hijacked. I'm waiting until it's resolved until I log in there. Moderators have notified the service provider of the problem. __________________ Igitur si vis pacem, para bellum - - Therefore if you want peace, prepare for war.

10-06-2019, 08:30 PM	#4
HerrKaiser User Join Date: Feb 2018 Location: South Carolina Posts: 800 Thanks: 750 Thanked 793 Times in 376 Posts	Have the gunboard forums been restored to working order? __________________ -QM Looking for Mauser S/42 toggle train #22

10-06-2019, 08:41 PM	#5
wlyon Lifer 2X Lifetime Forum Patron Join Date: May 2005 Location: Somewhere in Montana Posts: 2,614 Thanks: 3,140 Thanked 2,519 Times in 939 Posts	No __________________ Bill Lyon

10-07-2019, 09:04 AM	#10
mrerick Super Moderator - Patron LugerForum Life Patron Join Date: Dec 2009 Location: Eastern North Carolina, USA Posts: 3,900 Thanks: 1,370 Thanked 3,094 Times in 1,503 Posts	The moderators reported the certificate problem to the Gunboards administrators on Saturday morning, and have not heard back yet. The site is still serving with a certificate associated with a car collector group. I personally will not log into the site until the problem has been resolved, and am waiting to hear back from their administrators that it's been resolved. __________________ Igitur si vis pacem, para bellum - - Therefore if you want peace, prepare for war.

10-05-2019, 11:48 AM	#2
rolandtg User Join Date: Mar 2007 Location: Texas Hill Country Posts: 471 Thanks: 361 Thanked 254 Times in 111 Posts	It's a bad certificate error. This likely a configuration issue with the ISP who hosts the forums. More info: "What does this mean? We were able to retrieve a certificate for this site, but the domain names listed in it do not match the domain name you requested us to inspect. It's possible that: The web site does not use SSL, but shares an IP address with some other site that does. The web site no longer exists, yet the domain name still points to the old IP address, where some other site is now hosted. The web site uses a content delivery network (CDN) that does not support SSL. The domain name is an alias for a web site whose main name is different, but the alias was not included in the certificate by mistake. " "Why is my certificate not trusted? There are many reasons why a certificate may not be trusted. The exact problem is indicated on the report card in bright red. The problems fall into three categories: Invalid certificate Invalid configuration Unknown Certificate Authority 1. Invalid certificate A certificate is invalid if: It is used before its activation date It is used after its expiry date Certificate hostnames don't match the site hostname It has been revoked It has insecure signature It has been blacklisted 2. Invalid configuration In some cases, the certificate chain does not contain all the necessary certificates to connect the web server certificate to one of the root certificates in our trust store. Less commonly, one of the certificates in the chain (other than the web server certificate) will have expired, and that invalidates the entire chain. 3. Unknown Certificate Authority In order for trust to be established, we must have the root certificate of the signing Certificate Authority in our trust store. SSL Labs does not maintain its own trust store; instead we use the store maintained by Mozilla. If we mark a web site as not trusted, that means that the average web user's browser will not trust it either. For certain special groups of users, such web sites can still be secure. For example, if you can securely verify that a self-signed web site is operated by a person you trust, then you can trust that self-signed web site too. Or, if you work for an organisation that manages its own trust, and you have their own root certificate already embedded in your browser. Such special cases do not work for the general public, however, and this is what we indicate on our report card. 4. Interoperability issues In some rare cases trust cannot be established because of interoperability issues between our code and the code or configuration running on the server. We manually review such cases, but if you encounter such an issue please feel free to contact us. Such problems are very difficult to troubleshoot and you may be able to provide us with information that might help us determine the root cause. SSL Report v1.36.1"

10-06-2019, 10:09 PM	#6
Edward Tinker Super Moderator Eternal Lifer LugerForum Patron Join Date: Jun 2002 Location: North of Spokane, WA Posts: 15,909 Thanks: 1,986 Thanked 4,500 Times in 2,076 Posts	If you read the certificate, it shows the luger gunboards and main gunboards, yet i don't get a warning from main gunboards. I have left several notes and sent an email to one of the technical admins for gunboards

10-06-2019, 10:31 PM	#7
tenbears User Join Date: Dec 2004 Posts: 370 Thanks: 3 Thanked 26 Times in 15 Posts	I was a member of GermanDaggers.com for years and their site was flat out hacked and never returned. So I'm concern this isn't the same fate for Still's Luger forum.

10-07-2019, 12:52 AM	#8
Edward Tinker Super Moderator Eternal Lifer LugerForum Patron Join Date: Jun 2002 Location: North of Spokane, WA Posts: 15,909 Thanks: 1,986 Thanked 4,500 Times in 2,076 Posts	Always a worry, although since the company that runs Gunboards does scores of forums, it’s likely most is backed up.

10-07-2019, 07:45 AM	#9
Norme Always A Lifetime Forum Patron Join Date: Jul 2009 Location: Colorado Posts: 2,414 Thanks: 224 Thanked 2,591 Times in 930 Posts	I logged in on Day 1 and have visited every day since, but then Danger is my middle name. Norm

10-07-2019, 10:38 AM	#11
Mac Cat Lifer Lifetime Forum Patron Join Date: Apr 2015 Location: Austin, Texas Posts: 670 Thanks: 2,009 Thanked 542 Times in 292 Posts	It seems OK today. It did look like a bad certificate yesterday, but I didn't have any trouble today.

10-07-2019, 11:52 AM	#12
Sergio Natali User Join Date: Feb 2013 Location: Somewhere in Northern Italy Posts: 2,646 Thanks: 1,082 Thanked 1,783 Times in 1,007 Posts	Not yet unfortunately. __________________ "Originality can't be restored and should be at the top of any collector's priority list.

10-07-2019, 02:06 PM	#13
mrerick Super Moderator - Patron LugerForum Life Patron Join Date: Dec 2009 Location: Eastern North Carolina, USA Posts: 3,900 Thanks: 1,370 Thanked 3,094 Times in 1,503 Posts	I just checked and was able to loI just checked and was able to log into the Jan Still forum without a certificate error. Unfortunately, the certificate is still for the "200forum.com" Chrysler forum. I am concerned that the site may have been hijacked. Please don't log in until we confirm it's safe from the Gunboards administrators. __________________ Igitur si vis pacem, para bellum - - Therefore if you want peace, prepare for war.

10-07-2019, 05:37 PM	#14
Vlim Moderator Lifetime LugerForum Patron Join Date: Oct 2002 Location: Europe Posts: 5,032 Thanks: 1,018 Thanked 3,873 Times in 1,184 Posts	Its been fixed. luger.gunboards.com has been added to the shared certificate as far as I can see.

10-08-2019, 09:13 AM	#15
mrerick Super Moderator - Patron LugerForum Life Patron Join Date: Dec 2009 Location: Eastern North Carolina, USA Posts: 3,900 Thanks: 1,370 Thanked 3,094 Times in 1,503 Posts	Sounds good to me. We are now listed as a "Alternate Name" on the certificate (which supports a large number of the forums this service provider supports). The problem appears resolved. Marc __________________ Igitur si vis pacem, para bellum - - Therefore if you want peace, prepare for war.