Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleNET-001: Incomplete SSL certificate chain

Description

A website with this SSL misconfiguration might work fine in the browser, but it won't work for clients that do not support AIA Fetching, e.g. in Python. The error can be reproduced with `curl`, it will return error: "curl: (60) SSL certificate problem: unable to get local issuer certificate". The website can be also tested on https://www.ssllabs.com/ssltest/index.html .

Estimated severity

Status
colourRed
titleCritical

Examples

 

Suggested action

Test your website , configure on https://www.ssllabs.com/ssltest/index.html. Configure properly your webserver.

How communicated

Monitoring system

11 HEIs (6 providers) in PROD, 9 HEIs (7 providers) in DEV

...