# Secruity issue with downloading modules - blocked

**URL:** <https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339>\
**Category:** Site Feedback\
**Created:** [December 13, 2021, 12:22am UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339 "2021-12-13T00:22:17Z")\
**Posts on this page:** 8\
**Page:** 2

<div class="post-metadata">

**Author:** ![uckelman](https://forum.vassalengine.org/user_avatar/forum.vassalengine.org/uckelman/32/10020_2.png) [@uckelman](https://forum.vassalengine.org/u/uckelman)\
**Post date:** [December 16, 2021, 2:06pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/21 "2021-12-16T14:06:54Z")

</div>

Thank you! That’s exactly the information I needed.

The problem is _not_ that you have a cached version of our certificate from before Monday—you have the current one, which is good until February 2022. Instead, the problem is that the your browser is checking the expired DST Root CA X3 certificate.

That issue is discussed at some length [here](https://scotthelme.co.uk/lets-encrypt-old-root-expiration/). There’s nothing we can do about this on our end. The solution is to make sure that your browser and OS are current.

I think the reason this is happening now instead of on 30 September when the DST Root CA X3 expired is that our old certificate, which had that root certificate as part of its signing chain, was signed in the middle of September, _before_ the DST Root CA X3 certificate expired, so was still good for about two and a half months after that.

A little more background:

> **[Security Without Fear - Decipher](https://decipher.sc)**
>
> Security Without Fear

And some advice for how to update manually if you’re stuck with something that no longer receives updates:

> **[Let's Encrypt DST Root CA X3 expiry Sept 30th 2021 | Certify The Web Docs](https://docs.certifytheweb.com/docs/kb/kb-202109-letsencrypt/)**
>
> Certificate trust mainly relies on the "root" issuing certificate (and intermediate certificates) being trusted by your computer.

---

<div class="post-metadata">

**Author:** ![kenleesmith](https://forum.vassalengine.org/letter_avatar_proxy/v4/letter/k/90ced4/32.png) [@kenleesmith](https://forum.vassalengine.org/u/kenleesmith)\
**Post date:** [December 16, 2021, 4:47pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/22 "2021-12-16T16:47:55Z")

</div>

You are correct. I updated my OS. Which I thought was up-to-date, but wasn’t.

And now the downloads work fine, in both Chrome and Safari.

thanks for tracking that down

---

<div class="post-metadata">

**Author:** ![lcdanchik](https://forum.vassalengine.org/letter_avatar_proxy/v4/letter/l/9de053/32.png) [@lcdanchik](https://forum.vassalengine.org/u/lcdanchik)\
**Post date:** [December 22, 2021, 8:04pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/23 "2021-12-22T20:04:59Z")

</div>

I’m having the same issue. I read the above solution and made sure my Mac & Firefox was current. When I just tried to download a For The People module I still got the same  
“Did Not Connect: Potential Security Issue” warning and it will not let me override it.

---

<div class="post-metadata">

**Author:** ![lcdanchik](https://forum.vassalengine.org/letter_avatar_proxy/v4/letter/l/9de053/32.png) [@lcdanchik](https://forum.vassalengine.org/u/lcdanchik)\
**Post date:** [December 22, 2021, 8:06pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/24 "2021-12-22T20:06:04Z")

</div>

Forgot to add that I also deleted all the cookies before trying.

---

<div class="post-metadata">

**Author:** ![uckelman](https://forum.vassalengine.org/user_avatar/forum.vassalengine.org/uckelman/32/10020_2.png) [@uckelman](https://forum.vassalengine.org/u/uckelman)\
**Post date:** [December 22, 2021, 8:27pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/25 "2021-12-22T20:27:12Z")

</div>

There’s no point in deleting cookies. It’s not a cookies problem.

Which versions of MacOS and Firefox are you using?

---

<div class="post-metadata">

**Author:** ![lcdanchik](https://forum.vassalengine.org/letter_avatar_proxy/v4/letter/l/9de053/32.png) [@lcdanchik](https://forum.vassalengine.org/u/lcdanchik)\
**Post date:** [December 22, 2021, 10:45pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/26 "2021-12-22T22:45:54Z")

</div>

Mac-10.15.7  
Firefox-95.0.2

---

<div class="post-metadata">

**Author:** ![uckelman](https://forum.vassalengine.org/user_avatar/forum.vassalengine.org/uckelman/32/10020_2.png) [@uckelman](https://forum.vassalengine.org/u/uckelman)\
**Post date:** [December 22, 2021, 10:57pm UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/27 "2021-12-22T22:57:20Z")

</div>

Your Firefox is current. Are you able to open the dialog showing the certificate when you get the error and post a screenshot of that?

---

<div class="post-metadata">

**Author:** ![lcdanchik](https://forum.vassalengine.org/letter_avatar_proxy/v4/letter/l/9de053/32.png) [@lcdanchik](https://forum.vassalengine.org/u/lcdanchik)\
**Post date:** [December 23, 2021, 1:17am UTC](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339/28 "2021-12-23T01:17:43Z")

</div>

Not sure why but this time it let me download the module. Thanks for your help.

[Previous page](https://forum.vassalengine.org/t/secruity-issue-with-downloading-modules-blocked/73339.md?page=1)
