It’s breaking the access to the website and not a good look for the “app store for Linux”. A lesson in central points of failure?
https://www.flathub.org is using Let’s encrypt. Their certs only last 90 days so you need a script to make sure they are updated and pushed to your site. https://flathub.org uses Globalsign which lasts for 13 months. My guess is they don’t have a process for reconciling the two types of end dates.
It’s not hard to automate? I remember when Firefox had this same flub, lol
Well that instills confidence
topkek
FWIW … it is fixed now.
It’s broken on the www.flathub.org domain but not on just flathub.org by itself. Despite browsers trying to get rid of www its still commonly used.
Yeah, it isn’t a good look for flathub. I looked at the certificate and the Subject Alternative Names section was missing the www prefix. Why they’re not using Let’s Encrypt and certbot beats me because this could all be automated.
It’s not expired for me rn, so is this something that happened before?
Did you go on flathub.org or www.flathub.org? The certs are fine on the former, but expired on the latter.