# Fortran-lang website security issue?

**URL:** https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791
**Category:** Meta
**Created:** [May 25, 2025, 7:01pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791 "2025-05-25T19:01:19Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![fish830911](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/fish830911/32/2221_2.png) [@fish830911](https://fortran-lang.discourse.group/u/fish830911)
#### Post date: [May 25, 2025, 7:01pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/1 "2025-05-25T19:01:19Z")

</div>

Dear all,

The following screenshots comes from me scrolling thought the following [fortran-lang wiki](https://fortran-lang.org/learn/oop_features_in_fortran/performance_and_ease_of_use/):

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/b/bc5bfc2ab4a2ed0babedb2963f4bcf3558bb228c.png)

Just wondering what happened, or is it my local problem.

---

<div class="post-metadata">

### Author: ![ivanpribec](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/ivanpribec/32/3290_2.png) [@ivanpribec](https://fortran-lang.discourse.group/u/ivanpribec)
#### Post date: [May 25, 2025, 7:21pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/2 "2025-05-25T19:21:00Z")

</div>

Same connecting with Google Chrome. It says

> This server could not prove that it is [fortran-lang.org](http://fortran-lang.org) ; its security certificate expired in the last day.

---

<div class="post-metadata">

### Author: ![RonShepard](https://avatars.discourse-cdn.com/v4/letter/r/a3d4f5/32.png) [@RonShepard](https://fortran-lang.discourse.group/u/RonShepard)
#### Post date: [May 25, 2025, 7:21pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/3 "2025-05-25T19:21:50Z")

</div>

Firefox also prints a warning for that web site.

---

<div class="post-metadata">

### Author: ![certik](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/certik/32/4_2.png) [@certik](https://fortran-lang.discourse.group/u/certik)
#### Post date: [May 25, 2025, 10:03pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/4 "2025-05-25T22:03:05Z")

</div>

Same here. I can have a look tomorrow. Github says at [https://github.com/fortran-lang/webpage/settings/pages:](https://github.com/fortran-lang/webpage/settings/pages:)

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/d/dda5cc92ccdfdac9bbf92cab3e06b8379d3143af.png)

So it almost seems like a github issue with updating the certificate, unless something needs to be configured at our dns.

---

<div class="post-metadata">

### Author: ![certik](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/certik/32/4_2.png) [@certik](https://fortran-lang.discourse.group/u/certik)
#### Post date: [May 26, 2025, 8:53am UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/5 "2025-05-26T08:53:14Z")

</div>

Ok, GitHub gave a better error message now:

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/9/93f071e1cf08e2496651297231b452c7fac9e2bb.png)

I am not sure what changed. Investigating.

---

<div class="post-metadata">

### Author: ![certik](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/certik/32/4_2.png) [@certik](https://fortran-lang.discourse.group/u/certik)
#### Post date: [May 26, 2025, 9:13am UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/6 "2025-05-26T09:13:32Z")

</div>

Ok, so using [Managing a custom domain for your GitHub Pages site - GitHub Docs](https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site) we can verify that the IP addresses are set correctly:

```auto
$ dig fortran-lang.org +noall +answer -t A

; <<>> DiG 9.10.6 <<>> fortran-lang.org +noall +answer -t A
;; global options: +cmd
fortran-lang.org. 14400 IN A 185.199.109.153
fortran-lang.org. 14400 IN A 185.199.111.153
fortran-lang.org. 14400 IN A 185.199.110.153
fortran-lang.org. 14400 IN A 185.199.108.153
$ dig fortran-lang.org +noall +answer -t AAAA

; <<>> DiG 9.10.6 <<>> fortran-lang.org +noall +answer -t AAAA
;; global options: +cmd
fortran-lang.org. 14400 IN AAAA 2606:50c0:8002::153
fortran-lang.org. 14400 IN AAAA 2606:50c0:8001::153
fortran-lang.org. 14400 IN AAAA 2606:50c0:8003::153
fortran-lang.org. 14400 IN AAAA 2606:50c0:8000::153

```

That looks good. I changed `www` from `fortran-lang.github.com` to `fortran-lang.github.io`, according to the docs that should be the right value.

I can’t see any other problem. I am also “verifying” the domain using [Verifying or approving a domain for your organization - GitHub Docs](https://docs.github.com/en/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization), that worked:

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/8/877cb24fb101241cb7a45a03727a98de7b274a2a.png)

and

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/4/48e82be63fe719b7eea46ad84436ca9cf232edcd.png)

From the error message, it’s the `www.fortran-lang.org` that was incorrectly configured, and I think indeed it was, it was poinging to `.com` instead of `.io`, so I am hoping that was it. We’ll have to wait 4h and then try again.

---

<div class="post-metadata">

### Author: ![certik](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/certik/32/4_2.png) [@certik](https://fortran-lang.discourse.group/u/certik)
#### Post date: [May 26, 2025, 3:54pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/7 "2025-05-26T15:54:25Z")

</div>

Ok, that was it, progress:

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/6/6345b55d2183ae11ea9ee19705086ba983b0fe5f.png)

And I clicked the Enforce HTTPS and that also worked:

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/9/909d2ba7524b96d34257997f1f27f7a12390395d.png)

And the page is back on:

 ![image](https://global.discourse-cdn.com/free1/uploads/fortran_lang/original/2X/4/43e63d343babf636439b259a0685d76222f98ffa.png)

So the issue was that `www.fortran-lang.org` was pointing to `fortran-lang.github.com` instead of `fortran-lang.github.io`, I am guessing that has always been the case, but only now it actually failed at github, I guess they decided to put some extra enforcement of this.

---

<div class="post-metadata">

### Author: ![ivanpribec](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/ivanpribec/32/3290_2.png) [@ivanpribec](https://fortran-lang.discourse.group/u/ivanpribec)
#### Post date: [May 26, 2025, 4:17pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/8 "2025-05-26T16:17:55Z")

</div>

Works again without any warnings! Thanks for fixing that.

---

<div class="post-metadata">

### Author: ![fish830911](https://yyz2.discourse-cdn.com/free1/user_avatar/fortran-lang.discourse.group/fish830911/32/2221_2.png) [@fish830911](https://fortran-lang.discourse.group/u/fish830911)
#### Post date: [May 26, 2025, 6:35pm UTC](https://fortran-lang.discourse.group/t/fortran-lang-website-security-issue/9791/9 "2025-05-26T18:35:56Z")

</div>

Working for me too! Thank you so much 🙏
