1410788 - Certificate revoked for mdn-samples.mozilla.org

Status: RESOLVED FIXED

(developer.mozilla.org Graveyard :: General, enhancement)

Description

[keanan.smith]

What did you do?
================
Visited https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API/Taking_still_photos

Clicked on "Try this sample" which directed me to:

https://mdn-samples.mozilla.org/s/webrtc-capturestill

What happened?
==============
The web browser blocked the page load because the cerificate is revoked

What should have happened?
==========================
Someone should have obtained and installed a current certificate for the mdn-samples.mozilla.org site.

Is there anything else we should know?
======================================

Comment 1

[John Whitlock [:jwhitlock]]

The demo works over plain HTTP:

http://mdn-samples.mozilla.org/s/webrtc-capturestill/

Chris, I'm not familiar with this domain. Do you know more about it?

Comment 3

[keanan.smith]

@John Whitlock:

I get the error: 

capture.js:33 [Deprecation] getUserMedia() no longer works on insecure origins. To use this feature, you should consider switching your application to a secure origin, such as HTTPS. See https://goo.gl/rStTGz for more details.

In google chrome. See: https://developer.mozilla.org/en-US/docs/Web/API/MediaDevices/getUserMedia footnote 3 in the compatibility table.

Regardless of whether it's needed for this particular sample, it does make sense that MDN samples are served over https (For a variety of security related reasons)

Also, there are other samples on mdn-samples.mozilla.org that require https.

Comment 4

[Shyam Mani [:fox2mike]]

I've notified jgmize on IRC and he's looking into this.

Comment 5

[John Whitlock [:jwhitlock]]

The code appears to be from:

https://github.com/mdn/samples-server/tree/master/s/webrtc-capturestill

The certificate appears to be valid now. Using the command:

openssl s_client -showcerts -servername mdn-samples.mozilla.org -connect mdn-samples.mozilla.org:443 2> /dev/null | openssl x509 -inform pem -noout -text

it appears the certificate is valid until December 2018. It looks like Sheppy and jgmize figured it out.