Service Worker Certificate Caching Fix

🚨 Problem

When accessing Jumble from the ImWald landing page, the service worker serves a cached self-signed certificate instead of the new Let's Encrypt certificate.

⚡ Solutions

Option 1: Force Service Worker Update

Add this to your Jumble app's service worker or main JavaScript:

// Force service worker update and certificate refresh
if ('serviceWorker' in navigator) {
  navigator.serviceWorker.getRegistrations().then(function(registrations) {
    for(let registration of registrations) {
      registration.update(); // Force update
    }
  });
}

// Clear all caches on certificate update
if ('caches' in window) {
  caches.keys().then(function(names) {
    for (let name of names) {
      caches.delete(name);
    }
  });
}

Option 2: Update Service Worker Cache Strategy

In your service worker file, add cache busting for SSL-sensitive requests:

// In your service worker
self.addEventListener('fetch', function(event) {
  // Don't cache HTTPS requests that might have certificate issues
  if (event.request.url.startsWith('https://') && 
      event.request.url.includes('imwald.eu')) {
    event.respondWith(
      fetch(event.request, { cache: 'no-store' })
    );
    return;
  }
  
  // Your existing fetch handling...
});

Option 3: Version Your Service Worker

Update your service worker with a new version number:

// At the top of your service worker
const CACHE_VERSION = 'v2.0.1'; // Increment this when certificates change
const CACHE_NAME = `jumble-cache-${CACHE_VERSION}`;

// Clear old caches
self.addEventListener('activate', function(event) {
  event.waitUntil(
    caches.keys().then(function(cacheNames) {
      return Promise.all(
        cacheNames.map(function(cacheName) {
          if (cacheName !== CACHE_NAME) {
            return caches.delete(cacheName);
          }
        })
      );
    })
  );
});

Option 4: Add Cache Headers

In your Plesk Apache config for Jumble, add:

# Prevent service worker from caching SSL-sensitive content
Header always set Cache-Control "no-cache, no-store, must-revalidate"
Header always set Pragma "no-cache"
Header always set Expires "0"

# Only for service worker file
<Files "sw.js">
    Header always set Cache-Control "no-cache, no-store, must-revalidate"
</Files>

🧹 Immediate User Fix

For users experiencing the certificate issue:

Clear browser data for jumble.imwald.eu
Unregister service worker:
- F12 → Application → Service Workers → Unregister
Hard refresh: Ctrl+Shift+R
Or use incognito mode to test

This will prevent the service worker from serving stale certificate data.

2.7 KiB Raw Blame History