Crucial are incompetent clowns incapable of renewing an SSL certificate

[Assimilator]

Anyone unfortunate enough to use Crucial's shitty Storage Executive app to attempt to check for firmware updates will have received the following error since the 2nd of this month:

This is because Crucial are incompetent and failed to renew the SSL certificate used by the endpoint that Storage Executive connects to:

Their support are aware of this yet the certificate remains unrenewed nearly a month later.

I know who I won't be buying my next SSD from.

 

[ty_ger]

Probably the employee or contractor who designed it doesn't work for them any more; or the small budget to fix it hasn't been submitted and approved.

 

[R-T-B]

Anyone unfortunate enough to use Crucial's shitty Storage Executive app to attempt to check for firmware updates will have received the following error since the 2nd of this month:
View attachment 352262

This is because Crucial are incompetent and failed to renew the SSL certificate used by the endpoint that Storage Executive connects to:
View attachment 352263

Their support are aware of this yet the certificate remains unrenewed nearly a month later.

I know who I won't be buying my next SSD from.

Yes I've encountered this and yes I agree. Fun fact forcing your clock to May 8th or similar fixes it, but how friggin unprofessional. Shows what they think of their consumers.

Probably the employee or contractor who designed it doesn't work for them any more; or the small budget to fix it hasn't been submitted and approved.

Its also a Java app inside so this tracks.

 

[remixedcat]

Anyone unfortunate enough to use Crucial's shitty Storage Executive app to attempt to check for firmware updates will have received the following error since the 2nd of this month:
View attachment 352262

This is because Crucial are incompetent and failed to renew the SSL certificate used by the endpoint that Storage Executive connects to:
View attachment 352263

Their support are aware of this yet the certificate remains unrenewed nearly a month later.

I know who I won't be buying my next SSD from.

wow you can get those for like 30 a year or less... that's nothing to them. omg

 

[R-T-B]

wow you can get those for like 30 a year or less... that's nothing to them. omg

Hell my KSP mod has one:

Kopernicus Wiki

Kopernicuswiki.org

Maybe I should start selling SSDs...

 

[SPDIF]

Yes have seen the same thing here... Someone did not do his housework at Crucial. Contacted them two times, but did not hear anything back from them... Och well.

 

[unwind-protect]

Well, on the bright side this proves that they do (some parts of) proper certificate checking.

Not doing that for update downloads would be bad. And with this closed-source packages we can't look at the downloading mechanism.

ETA: extra credit for displaying a meaningful error message.

 

[DaemonForce]

I see nothing out of the ordinary here. I also don't need this software sooooooo wat do?

 

[R-T-B]

I see nothing out of the ordinary here. I also don't need this software sooooooo wat do?
View attachment 352337

You'd need a crucial drive for the firmware check to go ahead, and fail.

Well, on the bright side this proves that they do (some parts of) proper certificate checking.

That's just built into the ssl stack on Java. They literally didn't have a choice here other than using http, which would be just as bad.

 

[Easy Rhino]

It surprises me that enterprise still isn't using Let's Encrypt and using something as basic as CRON to renew every 60 days... That sad thing is Crucial probably paid some crappy contractor tens of thousands of dollars to setup the endpoint...

 

[R-T-B]

It surprises me that enterprise still isn't using Let's Encrypt and using something as basic as CRON to renew every 60 days... That sad thing is Crucial probably paid some crappy contractor tens of thousands of dollars to setup the endpoint...

They only paid for a year cert. Lets encrypt would've been a way better plan than that, or just I dunno, pony up for a longer term and mark it on the calendar. It isn't hard, or even really that expensive.

Hell if the firmware zips are signed, they could even just use http. They are so many facepalms here.

 

[LFaWolf]

They only paid for a year cert. Lets encrypt would've been a way better plan than that, or just I dunno, pony up for a longer term and mark it on the calendar. It isn't hard, or even really that expensive.

Hell if the firmware zips are signed, they could even just use http. They are so many facepalms here.

I believe TSL certificates are now only valid for 400 days. You can buy longer term but you have to renew it every year.

 

[Solaris17]

It surprises me that enterprise still isn't using Let's Encrypt and using something as basic as CRON to renew every 60 days... That sad thing is Crucial probably paid some crappy contractor tens of thousands of dollars to setup the endpoint...

They only paid for a year cert. Lets encrypt would've been a way better plan than that, or just I dunno, pony up for a longer term and mark it on the calendar. It isn't hard, or even really that expensive.

Hell if the firmware zips are signed, they could even just use http. They are so many facepalms here.

PKI admins (who are also usually in charge of this too) also get paid a metric shit ton which makes it even worse.

 

[R-T-B]

I believe TSL certificates are now only valid for 400 days. You can buy longer term but you have to renew it every year.

Hmm. Did not used to be that way but I haven't bought anything other than a yearly renewal for a long time.

 

[JIWIL]

I haven't bought Crucial anything since one of their early SSDs had a firmware bug that powered the drive down after an hour. It was my system drive. It took me the better part of a week to troubleshoot it.

 

[iameatingjam]

Anyone unfortunate enough to use Crucial's shitty Storage Executive app to attempt to check for firmware updates will have received the following error since the 2nd of this month:
View attachment 352262

This is because Crucial are incompetent and failed to renew the SSL certificate used by the endpoint that Storage Executive connects to:
View attachment 352263

Their support are aware of this yet the certificate remains unrenewed nearly a month later.

I know who I won't be buying my next SSD from.

YES! I am having the exact same problem! I had to use a different app to find out the firmware version and luckily in my case it was up to date.

 

[R-T-B]

Just FYI they finally fixed this a few days ago. Wow that was dumb.