yea I am hesitent to suggest that will resolve for most. there are issues at multiple stages of the key exchange

[quote=tank post_id=423568 time=1633495798 user_id=48]
they persist for some and not others. days ago it was intermittent for me now works every time
CA changes have been comming for a long time and kicked down several times over the years but most blogs said it would only be old OS's browsers affected.
I keep looking at related blogs and the issues are affecting even large tech companies sites. everytime i find something someone has tried i do attempt the same patches
[/quote]

The issue have been resolved thanks to following link,
[url]https://www.stephenwagner.com/2021/09/30/sophos-dst-root-ca-x3-expiration-problems-fix/[/url]
I had to install certificates (downloaded from above link using firefox v46.0b8 ) manually and restarted chrome browser

yea im aware ii took the recomendations already

Let's Encrypt - Certificate Compatibility List -> https://letsencrypt.org/docs/certificate-compatibility/

they persist for some and not others. days ago it was intermittent for me now works every time
CA changes have been comming for a long time and kicked down several times over the years but most blogs said it would only be old OS's browsers affected.
I keep looking at related blogs and the issues are affecting even large tech companies sites. everytime i find something someone has tried i do attempt the same patches

[quote=tank post_id=423197 time=1633199723 user_id=48]
even bank of america is experiencing massive outages i just read this morning
his seems to go way beyond the known letsencrypt root CA issue that was publicized
[/quote]
Certificate problem persist for me, idk why

even bank of america is experiencing massive outages i just read this morning
his seems to go way beyond the known letsencrypt root CA issue that was publicized

Yes, the certificates problem seems gone. Thank you!

Unfortunately, I still see a lot of connection timeouts - the forums are hardly usable for me right now.
A few fast page loads alternate with a multitude of very slow loads and timeouts.

all errant non www links should autocorrect now
cert issues should be resolved

at about 9:30 is pm -6 gmt the entire site went down.
i was dealling with some rather emotional family drama at the time so i apologise for the delay
I will work on a full debug of the issue and attempt proper resolution later

yep just got this today on the archive forum

thanks. i was working on it earlier but certbpt now requires snapd which isnt supported on our app server. ill finish the rediculous workaround tomorrow

[b]Description of the problem[/b]
https://scotthelme.co.uk/lets-encrypt-old-root-expiration/

First of his posts are now in Engl
https://borncity.com/win/2021/09/30/sept-30-2021-will-we-see-trouble-with-old-lets-encrypt-certificates/

2nd Post:
https://borncity.com/win/2021/09/30/lets-encrypt-zertifikate-rger-mit-windows-sophos-utm-macos-ios-30-9-2021/

This feels a bit reminiscent of the heartbleed bug: https://heartbleed.com/
:mrgreen:

Thousands of websites all over the world have just the Probelem with Lets Encrpyt certificates and these root certificates.

If it is a global problem:
A) DNS
B) Certs
C) Backbone
🙈

Nothing broken here yet, but maybe just a matter of time before it breaks...
[mention]jNizM[/mention] Thanks for sharing. :thumbup:

I've been using just google translate, as my technical German is not good
https://translate.google.com/translate?sl=de&tl=en&u=https://www.borncity.com/blog/2021/09/30/lets-encrypt-zertifikate-rger-mit-windows-sophos-utm-macos-ios-30-9-2021/

https://www.borncity.com/blog/2021/09/30/lets-encrypt-zertifikate-rger-mit-windows-sophos-utm-macos-ios-30-9-2021/
(Engl Translation is coming soon)


Todo in short:
* Renewing the certificates on the server causes the chains to be rebuild and fixes the issue
* rebooting the server causes the chains to be rebuilt and also fixes the issue.

this makes no sense whatsoever. certificates are not supposed to affect paths

Its a global issue with old lets encrypt root certs. Not just ahk page

https://www.heise.de/news/Let-s-Encrypt-Zertifikate-Ruckler-am-30-September-moeglich-6201155.html