dcs.world domain appears to have an invalid SSL certificate

[NytHawk]

[silverdevil]

6 hours ago, NytHawk said:

hello https://dcs.world is a redirect to https://www.digitalcombatsimulator.com/ both links are showing ok for the SSL. can you retry?

[okopanja]

The SSL section of server configured for dcs.world is improperly configured.

With http://dcs.world it redirect to https://www.digitalcombatsimulator.com/de/ (fine)

With https://dcs.world it uses wrong certificate, hence SSL connection is not established fully.

null@silverdevil the source of your error is that you are typing just dcs.world. By default this will be completed with http:// prefix, which in turn means no SSL. This is why it works for you. The original poster is correct.

[Insonia]

The certificate is OK.

It's for the *digitalcombatsimulator.com. not the dcs.world.

Without "forum" prefix, the DNS name resolves to the main site(digitalcombatsimulator.com).

Modern browsers prefer the TLS and completely ditch the http. DNS + http 80 redirect will not work.

They should just use HTTPs redirect.

An improper name resolver causes problem.

Should be in this section

https://forum.dcs.world/forum/61-forum-and-site-issues/

Edited November 5, 2023 by Insonia

[silverdevil]

all i can say is dcs.world (yes without http) redirects as it should to https://www.digitalcombatsimulator.com/en/ (english) for me. i see no SSL warning. odd.

23 minutes ago, Insonia said:

Should be in this section

https://forum.dcs.world/forum/61-forum-and-site-issues/

agreed. since OP is new it may be impossible for a posting in that sub-forum.

[okopanja]

Issue is still not really fixed, just mitigated.

1. ED needs to obtain separate certificate for https://dcs.world or disable the SSL interface on that SNI.
2. @silverdevil at this moment http://dcs.world redirects to https://www.digitalcombatsimulator.com/ which is OK-ish

Notice http vs https.

In general the site has very decent A grade at https://www.ssllabs.com/ssltest/analyze.html?d=digitalcombatsimulator.com (this page if not cached will take 1-2 minutes to generate), but not the A+.

However, noticeable is the usage of weaker  TLSv2 (TLSv3 would be better) and encryption algorithms (they need to disable some):

Edited November 16, 2023 by okopanja

[draconus]

Why do you care about dcs.world in the first place? Where did you get the link?

The certificate is correct for https://forum.dcs.world and you should use that link.

[NytHawk]

I don't care that much, however I'm just reporting it because why not.
Also https://forum.dcs.world/ directs to a whole different page to dcs.world (so no, you shouldn't just use that link lol)

[draconus]

6 hours ago, NytHawk said:

Also https://forum.dcs.world/ directs to a whole different page to dcs.world ...

Not in my case, so better check your DNS settings, proxy, browser and ipconfig /flushdns to clear cache.

[okopanja]

17 minutes ago, draconus said:

Not in my case, so better check your DNS settings, proxy, browser and ipconfig /flushdns to clear cache.

I think you misunderstood. Forum is irrelevant to the original problem of certificate valid for www.digitalcombatsimulator.com being used for https://dcs.world

For ordinary user this usually does not matter too much, but It's kind of a sloppiness: they should either procure valid certificate or turn of the https altogether. Furthermore it can affect their SEO for dcs.world since the https connections are valued better and in this case it is not functional.

Since the certificates get renewed usually once per year likely we will noyt see any change until current ones expire.

It would be interesting if other domains they used, e.g. for the game itself are indeed safe.

 

 

[draconus]

20 minutes ago, okopanja said:

I think you misunderstood.

Oh, so it's like some user edit the link himself, hoping it'll get him to the main site, but it's not valid?

Until such link is provided somewhere officially I don't see a problem.

[BIGNEWY]

I have asked admin to take a look at the certificate

thanks 

[okopanja]

3 minutes ago, draconus said:

Oh, so it's like some user edit the link himself, hoping it'll get him to the main site, but it's not valid?

Until such link is provided somewhere officially I don't see a problem.

Well dcs.world only redirects now. But perhaps ED has future plans other than the forum itself.

[MAXsenna]

Well dcs.world only redirects now. But perhaps ED has future plans other than the forum itself.

Well, it doesn't take much imagination as we do know the "world" map is in development.

Sent from my SM-A536B using Tapatalk