Discuss Scratch

SweeCat_official
Scratcher
3 posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

My browser / operating system: Windows NT 10.0, Chrome 91.0.4472.124, No Flash versions detected
edge 91
the title explains it all

click here to download and look at the image yourself.
when i continue it it, it redirects to en.scratch-wiki.info
try it yourself here
edit: it was fixed
edit 2: it was not fixed, i pressed continue so it will ignore at next visit

Last edited by SweeCat_official (July 9, 2021 20:32:16)

Chiroyce
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

Cannot replicate on Firefox 89 or Safari 14 for macOS, maybe it's an issue with your side because it says that your computer clock may be inaccurate?

And I think it's ok since it just redirects you to https://en.scratch-wiki.info







April Fools' topics:
New Buildings in Scratch's headquarters
Give every Scratcher an M1 MacBook Air
Scratch should let users edit other Scratchers' projects
Make a statue for Jeffalo
Scratch Tech Tips™
Make a Chiroyce statue emoji


<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence
SweeCat_official
Scratcher
3 posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

Chiroyce wrote:

Cannot replicate on Firefox 89 or Safari 14 for macOS, maybe it's an issue with your side because it says that your computer clock may be inaccurate?

And I think it's ok since it just redirects you to https://en.scratch-wiki.info
i did this on edge (chrome) and it shows that it expired, i have a windows XP VM without the google certificates, and firefox ignored the warnings, but chrome did not, so it only affects chrome and chrome based users, not firefox.
also, my system clock is correct according to one of the other devices i have
thanks for trying
note: i am on windows 10 so other people cant replicate it on other systems like: Mac and Linux

Last edited by SweeCat_official (July 8, 2021 19:18:46)

Thingied
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

My browser / operating system: Windows NT 10.0, Chrome 91.0.4472.124, No Flash version detected
Can't replicate. Also redirects me to https://en.scratch-wiki.info/ . Same on Edge and Firefox.

Chiroyce wrote:

maybe it's an issue with your side because it says that your computer clock may be inaccurate?
Probably this ^ or something else that has to do with your computer.

Last edited by Thingied (July 8, 2021 19:32:06)

Jeffalo
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

i can reproduce this issue.

incase others have trouble reproducing the issue, make sure it's https://wiki.scratch.mit.edu if you forget the s, it'll work properly because it's going over http.

it should be theoretically simple to renew an https cert right?

Last edited by Jeffalo (July 8, 2021 20:52:45)




my website: jeffalo.net | ocular: scratch forum search













ScolderCreations
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

I didn't get the same error. Mine was “The webpage could not be loaded because the server could not be found.”

Jeffalo
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

ScolderCreations wrote:

I didn't get the same error. Mine was “The webpage could not be loaded because the server could not be found.”
that was my bad, i added a comma at the end of the link



my website: jeffalo.net | ocular: scratch forum search













samq64
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

I'm getting redirected to en.scratch-wiki.info with no problem.

Last edited by samq64 (July 8, 2021 20:55:44)

ScolderCreations
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

I can replicate this on an Apple Watch.

Chiroyce
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

Jeffalo wrote:

i can reproduce this issue.

incase others have trouble reproducing the issue, make sure it's https://wiki.scratch.mit.edu if you forget the s, it'll work properly because it's going over http.

it should be theoretically simple to renew an https cert right?
jeffalo to the rescue! can replicate now, macOS 11.4, Firefox 89








April Fools' topics:
New Buildings in Scratch's headquarters
Give every Scratcher an M1 MacBook Air
Scratch should let users edit other Scratchers' projects
Make a statue for Jeffalo
Scratch Tech Tips™
Make a Chiroyce statue emoji


<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence
dhuls
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

Yes, can replicate on Windows 10, Edge 91, Chrome 91 (ew) Firefox 89, and Firefox 78 ESR
Edge:

Chrome:

Firefox (RR):

Firefox (ESR):

I think I was one of the 1st people to report it. I did so on the forum topic, and only the ST can fix it, as per what @jvvg said.

Last edited by dhuls (July 9, 2021 03:40:02)

SonicFanX123_321
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

samq64 wrote:

I'm getting redirected to en.scratch-wiki.info with no problem.
1. get chrome (skip it ur a chrome user already)
2. go to https://wiki.scratch.mit.edu

this is my page

I'm not active on scratch anymore, I moved on.
Chiroyce
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

SonicFanX123_321 wrote:

1. get chrome (skip it ur a chrome user already)
works on firefox and safari as well

Safari -







April Fools' topics:
New Buildings in Scratch's headquarters
Give every Scratcher an M1 MacBook Air
Scratch should let users edit other Scratchers' projects
Make a statue for Jeffalo
Scratch Tech Tips™
Make a Chiroyce statue emoji


<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence
dhuls
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

SonicFanX123_321 wrote:

1. get chrome
Edge, Safari, and Firefox are all better than chrome and can replicate this issue just as easily.
codubee
Scratch Team
85 posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

Reload.

Chiroyce
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

codubee wrote:

Reload.
Thank you kind sir, it works!







April Fools' topics:
New Buildings in Scratch's headquarters
Give every Scratcher an M1 MacBook Air
Scratch should let users edit other Scratchers' projects
Make a statue for Jeffalo
Scratch Tech Tips™
Make a Chiroyce statue emoji


<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence
dhuls
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

codubee
Scratch Team
85 posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

For the curious, here is what happened:
  • The wiki was turned over to the folks behind scratch-wiki.info in 2018
  • A redirector on a standalone EC2 AWS instance was setup and configured to return redirects to scratch-wiki.info with HTTPS and HTTP supported
  • This host had letsencrypt installed on it and it has run on its own since that time
  • Since then, letsencrypt has evolved and no longer supported the version of `certbot` running on wiki.scratch.mit.edu
  • That stopped working (after working fine for the last 3 years or so) but we didn't notice until this forum post
  • We have a check on HTTPS for wiki.scratch.mit.edu by a third party vendor, but this did not alert us in a timely fashion.
  • Fixing it was just updating to the most recent version of `certbot`

Last edited by codubee (July 9, 2021 15:49:16)


Chiroyce
Scratcher
1000+ posts

the redirector "wiki.scratch.mit.edu" has an expired certificate

codubee wrote:

We have a check on HTTPS for wiki.scratch.mit.edu by a third party vendor, but this did not alert us in a timely fashion.
Which vendor was it? I'm curious







April Fools' topics:
New Buildings in Scratch's headquarters
Give every Scratcher an M1 MacBook Air
Scratch should let users edit other Scratchers' projects
Make a statue for Jeffalo
Scratch Tech Tips™
Make a Chiroyce statue emoji


<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence

Powered by DjangoBB