cancel
Showing results for 
Search instead for 
Did you mean: 

Security certificate (SSL) Fault

tmd63
Dabbler
Posts: 11
Fixes: 2
Registered: ‎05-01-2017

Security certificate (SSL) Fault

Plusnet has generated a new SSL certificate and broken my website. It now refuses to go to my website but redirects to Plus.net instead! This has been going on since 8th Sept and I have been website-less for more than 7 days! FIX IT!

14 REPLIES 14
Baldrick1
Moderator
Moderator
Posts: 12,434
Thanks: 5,597
Fixes: 430
Registered: ‎30-06-2016

Re: Security certificate (SSL) Fault

Moderator's note:
Thread moved from Community Site Feedback to Everything Else

Moderator and Customer
If this helped - select the Thumb
If it fixed it,  help others - select 'This Fixed My Problem'

paul_blitz
Pro
Posts: 251
Thanks: 71
Fixes: 3
Registered: ‎20-07-2016

Re: Security certificate (SSL) Fault

Suggest you phone the support team....

RPMozley
Pro
Posts: 1,351
Thanks: 88
Fixes: 13
Registered: ‎04-11-2011

Re: Security certificate (SSL) Fault

Is it possible for you to provide the website link for others to do some checking?
That's RPM to you!!
tmd63
Dabbler
Posts: 11
Fixes: 2
Registered: ‎05-01-2017

Re: Security certificate (SSL) Fault

pvmb
Pro
Posts: 747
Thanks: 99
Fixes: 4
Registered: ‎12-02-2014

Re: Security certificate (SSL) Fault

Just had this while looking at Plusnet forum:

!

"Your connection isn't private
Attackers might be trying to steal your information from community.plus.net (for example, passwords, messages or credit cards).
NET::ERR_CERT_COMMON_NAME_INVALID"

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,930
Thanks: 5,016
Fixes: 317
Registered: ‎04-04-2007

Re: Security certificate (SSL) Fault


@tmd63 wrote:

Plusnet has generated a new SSL certificate and broken my website. It now refuses to go to my website but redirects to Plus.net instead! This has been going on since 8th Sept and I have been website-less for more than 7 days! FIX IT!


Not sure I understand?

Both of the URLs you posted seem to point to websites that are hosted on the Plusnet Homepages platform, which does not offer SSL unless you're incorporating URLs in the format https://homepages.plus.net/<username>...

Are you doing so? If not, I'm not sure what SSL certs have to do with anything.

I can reach both sites by the way. One displays a website, the other a server directory listing.

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

paul_blitz
Pro
Posts: 251
Thanks: 71
Fixes: 3
Registered: ‎20-07-2016

Re: Security certificate (SSL) Fault

So, if you go to the PLAINTEXT versions of those sites, then they load as described above. If you manually type "https://..." then yes, there is an issue, the ssl certificate is issued to 'homepages.plus.net', which doesn't surprise me.

So, if a user just types your URL, then they will end up on your plaintext site.... noone will want to (unless testing!) waste time typing the "https://".

If you want to be more secure, then you need to set up the web server to do an http to https redirect, and get your own ssl certificate in place: assuming that you are using some free plusnet webspace, this may not actually be supported. Looking online, I see that home broadband users didn't get any webspace, whilst business users did. Of course, Plusnet no longer support business accounts, so like other things, I'll guess any web space support is also quietly dying.

So I'm thinking it's time for you to look at proper website hosting, you'll get a full control panel, and support to use SSL, and it needn't be expensive.

bobpullen
Community Gaffer
Community Gaffer
Posts: 16,930
Thanks: 5,016
Fixes: 317
Registered: ‎04-04-2007

Re: Security certificate (SSL) Fault


@paul_blitz wrote:

If you want to be more secure, then you need to set up the web server to do an http to https redirect, and get your own ssl certificate in place: assuming that you are using some free plusnet webspace, this may not actually be supported.


It isn't.

The only way to serve content over HTTPS using the Plusnet Homepages platform is to use a URL that honours the SSL certificate i.e. https://homepages.plus.net/<pn_username>/<resource>

Bob Pullen
Plusnet Product Team
If I've been helpful then please give thanks ⤵

paul_blitz
Pro
Posts: 251
Thanks: 71
Fixes: 3
Registered: ‎20-07-2016

Re: Security certificate (SSL) Fault

Sound like it *is* time to look for some new hosting. If your domain name's DNS is hosted by Plusnet, you probably need a new home for that too!

tmd63
Dabbler
Posts: 11
Fixes: 2
Registered: ‎05-01-2017

Re: Security certificate (SSL) Fault

The problem is this has been a working up until a week prior ago and the domain if a free domain hosted by Plusnet with the domain name is free. Google was indexing my pages for searches. They are only the http not https

tmd63
Dabbler
Posts: 11
Fixes: 2
Registered: ‎05-01-2017

Re: Security certificate (SSL) Fault

This is the exact fault I am seeing and it appears all my cgi-bin file return the same 404 error to google who are trying to index 11 pages within my cgi-bin folder

http://www.lonewolf-enterprises.co.uk/cgi-bin/newfile.htm is one such file location and firefox just returns 404, but other browsers jump to the plusnet website instead. This means that plusnet has been getting my site traffic.

Maybe it is time to get my own webserver running and email server for the unlimited emails.

tmd63
Dabbler
Posts: 11
Fixes: 2
Registered: ‎05-01-2017

Re: Security certificate (SSL) Fault

It turns out the CGI space server is or appears dead. I cannot access the CGI server.

Townman
Superuser
Superuser
Posts: 24,096
Thanks: 10,248
Fixes: 176
Registered: ‎22-08-2007

Re: Security certificate (SSL) Fault

 

@bobpullen

Is there a cgi service name resolution issue here?

Setting aside discussion on if the OP's cgi URL above is correct - though I can access my (not really used) cgi portal at https://hosting.plus.net/portal ... I cannot resolve http://cgi.<username>.plus.com/

Nslookup reports the domain as non-existent.

 

I do not recall if this ever worked for (or was used in 'anger' by) me and that is why it is not working ... or is there an issue with the cgi. subdomain registration / resolution?

 

It is not helpful that the rich history on cgi held in this community has been achieved - otherwise I might have been able to research the answer myself.

Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.

paul_blitz
Pro
Posts: 251
Thanks: 71
Fixes: 3
Registered: ‎20-07-2016

Re: Security certificate (SSL) Fault

As I said before, I'd be looking for a new web hosting site, one that is actually supported and has a future.

Also get any domain names moved to a site that actively supports them (there's plenty to choose from, I use names.co.uk, who also it seems do web hosting and email).