Page 1 of 1

ERR_CERT_SYMANTEC_LEGACY

Posted: 19 Nov 2018, 10:23
by andrew2110
Hello!

Over the weekend we've started to see this error (ERR_CERT_SYMANTEC_LEGACY) pop up when trying to connect via WebGL to our server. The problem in detail can be read about here:

https://knowledge.digicert.com/alerts/A ... wsLLD_sHFQ

It seems that I'll need to get a new certificate installed on the server from Symantec, GeoTrust, RapidSSL or Thawte? I believe that currently its a self-signed certificate. Potential issues / worries I'm having about this are:

1. www.blueomega.net is where the smartfox server resides and all the clients (WebGL, Android, iOS, PC) connect to
2. www.blueomega.net resolves to IP address 64.91.226.4, this is my server but it hosts a few different sites
3. Installing a certificate to www.blueomega.net, I think this would require the IP address to be dedicated to just www.blueomega.net so I'd lose the other sites hosted by that IP address?

I can't really change the IP address that the server runs on, it would cause an unacceptable amount of downtime for all versions of the game.

Is there anyone at SmartFox who would be willing to take on the task (paid) to handle this issue for me? I'm a little out of my depth when it comes to things of this nature and can't afford to have a lot of downtime. The server is a Cent OS 6 64 bit server hosted by a company called Liquidweb.

Re: ERR_CERT_SYMANTEC_LEGACY

Posted: 19 Nov 2018, 14:41
by Lapo
Hi,
andrew2110 wrote: 1. http://www.blueomega.net is where the smartfox server resides and all the clients (WebGL, Android, iOS, PC) connect to
2. http://www.blueomega.net resolves to IP address 64.91.226.4, this is my server but it hosts a few different sites
3. Installing a certificate to http://www.blueomega.net, I think this would require the IP address to be dedicated to just http://www.blueomega.net so I'd lose the other sites hosted by that IP address?
I am not an Apache expert but I know it should be possible to use multiple certificates on a single Apache instance for different domains.
See here:
https://www.digicert.com/ssl-support/ap ... ng-sni.htm
Is there anyone at SmartFox who would be willing to take on the task (paid) to handle this issue for me? I'm a little out of my depth when it comes to things of this nature and can't afford to have a lot of downtime. The server is a Cent OS 6 64 bit server hosted by a company called Liquidweb.
We can help with the specifics of installing a certificate in SFS2X, but we're not able to provide support for Apache and website management in general. In these regards I'd recommend asking advice to your current hosting provider.

Cheers