[Commotion-admin] [luci-commotion] https redirect results in inescapable certificate errors in Firefox (#23)

[technosopher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Whoops - thought I saw identical fingerprints for two different nodes,
but I must've just been looking at a cached copy of the page or
something.  Thanks for the clarification!

Jordan McCarthy
Open Technology Institute | New America Foundation
Public Key: 0xC08D8042 | 4A61 3D39 4125 127D 65EA DDC2 BFBD A2E9 C08D 8042

On 09/16/2013 02:20 PM, Josh King wrote:
> Actually, every node is creating its own certificate; it gets
> generated on first boot. The problem is that when you permanently
> save the cert, your browser maps it to an IP address. If you
> primarily access the node through the 192.168.1.20 alias, rather
> than its LAN address, when you save the cert it gets associated
> with the 192.168.1.20 address. When you go to another node, it gets
> the same IP address but a different certificate (actually if it
> were the same cert, you wouldn't get this error at all), thus
> causing the error. This only occurs for users who primarily connect
> via the 192.168.1.20 alias rather than getting a DHCP lease. The
> solution is to change the 'thisnode' alias to point to the main LAN
> IP, and remove the 192.168.1.20 alias. The first part of the 
> solution at least is in DR2. I'll leave this issue open in the
> meantime until DR2.1 changes the IP addressing, which will address
> the second part.
> 
> — Reply to this email directly or view it on GitHub 
> <https://github.com/opentechinstitute/luci-commotion/issues/23#issuecomment-24532048>.
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSN1IOAAoJEL+9ounAjYBC6bAIAJi327pCl+QW+ZEubLR2o/4z
5fKKRp+udxps9sTdkIailzrQRM/cgdwaLSzdnW2MZARKpKCgI+wk9pc8qQlfDofR
DEqm5/+/TEchr/sa/jcZ5cWlAAuXRFr/x+7qt0+YKQaMJrntedJ09b/Yc2zd4323
YLsIY+zK4YHyUEnyGn4oNrPxkT8K8ShU/m4XOyUt5Ao2efUvvsF4POgzvDN8hlrG
dIeVYFUbGV4hposaV9SDDoBPrXaF1QVVX+mJugAm2B158F5Ppi8bxQKEW4sUZKkU
Uzor3smi2L7/s7Arw4XpmJ2AcYDvpWPNxQdAY20YIDD42mkEpTcaskoJxd9egow=
=xjsC
-----END PGP SIGNATURE-----

---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/luci-commotion/issues/23#issuecomment-24534061
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20130916/bb44273a/attachment.html>