[Bug 2252499] New: problem with ask.fedoraproject.org cert

https://bugzilla.redhat.com/show_bug.cgi?id=2252499

Bug ID: 2252499
           Summary: problem with ask.fedoraproject.org cert
           Product: Fedora Documentation
           Version: devel
            Status: NEW
         Component: homepage
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail], [e-mail]
  Target Milestone: ---
    Classification: Fedora

Description of problem:

Mozilla Firefox and Google Chrome forbid navigation to ask.fedoraproject.org,
due to its cert being for *.discourse.org.  No override is available.

Version-Release number of selected component (if applicable):

not applicable

How reproducible: often

Steps to Reproduce:

1. Connect to https://fedoraproject.org/start
2. click on ask.fedoraproject.org in the "Latest Solved Issues" listing
3. An error page results

Actual results:

Mozilla Firefox: "Firefox does not trust this site because it uses a
certificate that is not valid for ask.fedoraproject.org. The certificate is
only valid for *.discourse.org."  It's possible to view the certificate. Its
issuer is Let's Encrypt, and it's valid from 23 Oct 2023 to 21 Jan 2024.

Google Chrome: Less precise information is available.  Error
"NET::ERR_CERT_COMMON_NAME_INVALID" is issued.  It also says, "When Chrome
tried to connect to ask.fedoraproject.org this time, the website sent back
unusual and incorrect credentials."  and "You cannot visit
ask.fedoraproject.org right now because the website uses HSTS."

Expected results:

I would expect this would bring me to the site where Fedora users discuss
Fedora.

Additional info:

[Bug 2252499] problem with ask.fedoraproject.org cert

https://bugzilla.redhat.com/show_bug.cgi?id=2252499

Christopher Klooz  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #1 from Christopher Klooz  ---
Thanks for the report! Indeed something we need to solve

I can confirm the issue with firefox (SSL_ERROR_BAD_CERT_DOMAIN because of
*.discourse.org). It is only the forwarding of ask.fedoraproject.org that does
not work. The actual page is https://discussion.fedoraproject.org/c/ask/, which
works fine (ask.fp is only a forwarding to the latter as of today).

But this issue does not belong to Docs.

I have forwarded this to [e-mail] to handle this. They might
take over, or forward it if https/dns issues belong to someone else.

For now, you can use the direct link to
https://discussion.fedoraproject.org/c/ask

[Bug 2252499] problem with ask.fedoraproject.org cert

https://bugzilla.redhat.com/show_bug.cgi?id=2252499

--- Comment #2 from Christopher Klooz  ---
Related discussion.fp topic:
https://discussion.fedoraproject.org/t/forwarding-from-ask-fp-org-to-discuss...

---

The issue is forwarded and will be handled by another team.

This ticket can be closed.

Thanks again for reporting!

[Bug 2252499] problem with ask.fedoraproject.org cert

https://bugzilla.redhat.com/show_bug.cgi?id=2252499

Petr Bokoc  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Doc Type|---                         |If docs needed, set a value
         Resolution|---                         |CANTFIX
             Status|NEW                         |CLOSED
        Last Closed|                            |2024-05-21 10:49:28