What's new

EIS Site down/how to get started?

I opened up this site, and got in to our EIS system no problem...


There's an older EIS site which is now defunct, as we migrated over. Try the one I listed above. Let me know if you can get in.
 
I'm getting this error message: "SEC_ERROR_REVOKED_CERTIFICATE"

Not sure what that means but maybe it helps to investigate deeper. I'm using Firefox, the latest version.
 
It generally just means a certificate expired. Sometimes the auto-update for Let's Encrypt fails and if you don't catch it, this happens.

In this case, having had a quick look, it looks like a cockup at GoDaddy (the certificate issuer) as the expiry date is June 2022, or possibly them reacting to a signal that the private key might have compromised in some way.
 
The certificate isn't listed in the CRL (actually it is, see below). I thought perhaps the cert had an OCSP Must Staple extension and was missing the OCSP staple, but nope, that's not it.

The actual problem is that GoDaddy's OCSP server is listing the cert as revoked. GoDaddy will need to be contacted to sort this out.

1640023659432.png

Chromium-based browsers generally don't check OCSP in band (because it slows things down), which is why not everyone experiences an issue.

Edit: I tell a lie. I searched the CRL for the wrong thing (case sensitivity snafu). It actually is listed in the CRL:

Code:
    Serial Number: 39C0345468F6F9F1
        Revocation Date: Nov 30 22:25:20 2021 GMT
        CRL entry extensions:
            X509v3 CRL Reason Code:
                Key Compromise
            Invalidity Date:
                May 28 07:00:00 2021 GMT
 
Last edited:
Top Bottom