Site suddenly does not work with firefox. Chrome ok.

[drwankel]

Hi All,

Since yesterday, the site does not load when using Firefox.

I simply see the following error message when using the site:

"We are performing maintenance and shall return in a few hours! (od7)"

Today I realized the site still worked in the mobile app, and then I got curious and noticed that chrome works on desktop as well.

For some reason, ONLY firefox has this problem. It started yesterday.

Anybody know what the deal is?

[Mark]

Originally Posted by drwankel

Hi All,

Since yesterday, the site does not load when using Firefox.

I simply see the following error message when using the site:

"We are performing maintenance and shall return in a few hours! (od7)"

Today I realized the site still worked in the mobile app, and then I got curious and noticed that chrome works on desktop as well.

For some reason, ONLY firefox has this problem. It started yesterday.

Anybody know what the deal is?

Most likely some aggressive caching by firefox. I know this will sound like a joke, but try completely closing firefox and opening from scratch and trying again, or rebooting the computer if that fails

[drwankel]

Originally Posted by Mark

Most likely some aggressive caching by firefox. I know this will sound like a joke, but try completely closing firefox and opening from scratch and trying again, or rebooting the computer if that fails

What the heck, you were probably right.

Closed firefox, no change, cleared cache, no change, rebooted, all good.

Why in the world would a reboot fix it and not a cache clear?

Oh well, all good now. Thank you!

[drwankel]

Slightly related to the original issue, but reproducible with a different set of symptoms. (for clarity, the e9x m3 boards are normally where I hang out, and occasionally the g20 board)

I can cleanly reproduce this on the m6 board even from a clean browser session.

While looking at it, it appears that the M6 board is using a completely different certificate than the rest of the site. Cert issued date of 12/4 vs 12/13 like the rest of the boards.

Subject name of the cert on the m6 board is 1addicts.com instead of bimmerpost.com like the rest of the boards (and obviously a different cert thumbprint.)

I can see that there was a certificate updated for everything else today. Of the cert issued today, it lacks the subject alternative name for the m8 board so users are getting TLS errors when going there (f92.bimmerpost.com). Oddly enough, the cert bound to the m6 boards DOES have the missing subject alternative name that the other cert doesn't have.

I would recommend two things. One, it looks like the main site cert needs to be regenerated with the correct list of subject alternative names, and then I would ensure that this single certificate is used on all the boards across the site. It seems pretty obvious that was the intention, but sounds like you guys had a bunch of fun with getting the cert updated today.

Sincerely, someone who deals with cert problems way too frequently at work.

[Mark]

Originally Posted by drwankel

Slightly related to the original issue, but reproducible with a different set of symptoms. (for clarity, the e9x m3 boards are normally where I hang out, and occasionally the g20 board)

I can cleanly reproduce this on the m6 board even from a clean browser session.

While looking at it, it appears that the M6 board is using a completely different certificate than the rest of the site. Cert issued date of 12/4 vs 12/13 like the rest of the boards.

Subject name of the cert on the m6 board is 1addicts.com instead of bimmerpost.com like the rest of the boards (and obviously a different cert thumbprint.)

I can see that there was a certificate updated for everything else today. Of the cert issued today, it lacks the subject alternative name for the m8 board so users are getting TLS errors when going there (f92.bimmerpost.com). Oddly enough, the cert bound to the m6 boards DOES have the missing subject alternative name that the other cert doesn't have.

I would recommend two things. One, it looks like the main site cert needs to be regenerated with the correct list of subject alternative names, and then I would ensure that this single certificate is used on all the boards across the site. It seems pretty obvious that was the intention, but sounds like you guys had a bunch of fun with getting the cert updated today.

Sincerely, someone who deals with cert problems way too frequently at work.

Thanks for this. 6post is, for the time being, being worked on so it will remain inaccessible for I *think* another 24 hours