For the second problem:
- Are you able to reach our front page at https://vassalengine.org without any warnings in your browser?
- Do you ever have problems reaching other sites which use HTTPS?
The error messages I’m seeing in your error log about our SSL certificate are puzzling:
java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: No subject alternative DNS name matching vassalengine.org found.
...
Caused by: javax.net.ssl.SSLHandshakeException: No subject alternative DNS name matching vassalengine.org found.
...
Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching vassalengine.org found.
From those, you’d expect that the CN for our SSL certificate doesn’t match the hostname the bug reporter is contacting.
I can see from the log the failure happens via LiveVersionInfo.getVersion(), and the URL used there is hard-coded in the class: https://vassalengine.org/util/. When I check our certificate, the only CN listed is vassalengine.org.
Why is Java on your system considering those to be a mismatch? If the hostname in the URL in use really didn’t match the CN of our certificate, how could we have received dozens of bug reports successfully this way? It makes me wonder if your ISP is fiddling with your network traffic somehow.