[
https://issues.apache.org/jira/browse/OFBIZ-9242?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15894373#comment-15894373 ]
Jacques Le Roux commented on OFBIZ-9242:
----------------------------------------
OK I just tried to register demo-trunk.ofbiz.apache.org at
https://hstspreload.org/?domain=demo-trunk.ofbiz.apache.org here is the answer
bq. Error: Subdomain demo-trunk.ofbiz.apache.org` is a subdomain. Please preload `apache.org` instead. (Due to the size of the preload list and the behaviour of cookies across subdomains, we only accept automated preload list submissions of whole registered domains.)
Then
https://hstspreload.org/?domain=apache.org responds by
bq. Invalid Certificate Chain
https://apache.org uses an incomplete or invalid certificate chain. Check out your site at
https://www.ssllabs.com/ssltest/I tried apache.org at
https://www.ssllabs.com/ssltest/ here is what I got
{quote}
Certificate name mismatch
Try these other domain names (extracted from the certificate(s)):
*.openoffice.org
openoffice.org
What does this mean?
We were able to retrieve a certificate for this site, but the domain names listed in it do not match the domain name you requested us to inspect. It's possible that:
The web site does not use SSL, but shares an IP address with some other site that does.
The web site no longer exists, yet the domain name still points to the old IP address, where some other site is now hosted.
The web site uses a content delivery network (CDN) that does not support SSL.
The domain name is an alias for a web site whose main name is different, but the alias was not included in the certificate by mistake.
{quote}
This sadly remembers me my experience with the previous ASF proxy and certificate and why I decided to use letsencrypt. I'll not get further.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
Locked
