[geotk] Broken https and incorrect/expiring certs

[Alex Lake]

Thank you for the fast response. I will follow up there.


Sorry for the confusion,
Alex
________________________________
From: Geotoolkit [geotoolkit-bounces at lists.osgeo.org] on behalf of Martin Desruisseaux [martin.desruisseaux at geomatys.com]
Sent: Wednesday, April 06, 2016 1:34 AM
To: geotoolkit at lists.osgeo.org
Subject: Re: [geotk] Broken https and incorrect/expiring certs


Hello Alex

I realize that the similarity between the two project names is unfortunate. In part for fixing that mistake (but also for other reasons), we are slowly moving large part of Geotk content to the Apache Foundation in http://sis.apache.org/<https://urldefense.proofpoint.com/v2/url?u=http-3A__sis.apache.org_&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=GtgxC_Lk50WTyZYP6Pg7ZZ4ULT8xLL1zG2m8tkLDJxM&e=>. Geotk itself will become a kind of sandbox where we develop some experiments faster than what we can do in Apache SIS (but with less commitment on API stability). Then when a Geotk content is considered mature enough and its dependencies have already been ported to SIS, we migrate that content to SIS.

We already migrated the metadata module (ISO 19115) to SIS 0.6. Most of the referencing module will be in SIS 0.7 (hopefully released at the end of this month).

    Regards,

        Martin


Le 06/04/16 08:59, Alexis Manin a écrit :
HI,

I'm sorry, but Geotoolkit and Geotools are two different organizations. Geotoolkit is a fork totally independant from Geotools from about a decade now.

Also, it looks to be a problem related directly to OSGeo. We cannot help you here ! You should try to contact them directly : http://www.osgeo.org/contact<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.osgeo.org_contact&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=ZbOSbCO44Xh-b-sUwiyxVYZgZ889TovoHK4tWxTfX7U&e=>

Regards,

2016-04-06 5:33 GMT+02:00 Alex Lake <alake at palantir.com<mailto:alake at palantir.com>>:
Hello,

I am having issues accessing:
https://download.osgeo.org/webdav/geotools/<https://urldefense.proofpoint.com/v2/url?u=https-3A__download.osgeo.org_webdav_geotools_&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=e4483uDNnBLZTyOIHQnZG8sV7Wa3J9YN2kKHDFs50Z8&e=> (and https://download.osgeo.org/<https://urldefense.proofpoint.com/v2/url?u=https-3A__download.osgeo.org_&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=s7jw4OxxjK7l0i42CLuMa1VKWfHC5HTtq003T0nvBSM&e=>)

HTTP works fine, but not HTTPS. HTTPS appears to run into an SSL protocol error.

https://www.geotools.org/<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.geotools.org_&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=YcbhhIsbDPlF1UF0V25lGB39WzSwV44ftjWG2UGl3-U&e=> serves a cert with *.osgeo.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__osgeo.org&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=UmYkxhVbCGzVo27rL_zhDjdKiJjGcj2DgJYPlmf4jKA&e=> as the common name. This cert would work for download.osgeo.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__download.osgeo.org&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=mH0K0v0kuSHWI43qpQOwdcFr3jEh8kLDHm5udkk04VI&e=>, so it looks like all the pieces are in place to enable https.

Is there a chance someone could fix SSL for download.osgeo.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__download.osgeo.org&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=mH0K0v0kuSHWI43qpQOwdcFr3jEh8kLDHm5udkk04VI&e=>?

Thanks!

I also noticed the following:
1. geotools.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__geotools.org&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=ispzmSO9fRoe7lF9XOrC4Jb3Ey0Pr5qtQ8pwu1GsH9k&e=> does not appear in the Common Name or the Subject Alternate Name for the cert referenced above, thus this cert cannot be used to verify the identity of www.geotools.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.geotools.org&d=CwMDaQ&c=izlc9mHr637UR4lpLEZLFFS3Vn2UXBrZ4tFb6oOnmz8&r=bOmYm8mDloNHRaNOagZndBLZ6OwF6F2NupJ6wlVy5-M&m=nv5O9WUXXIWlZsyaH0tLegRbBWYRcH7U1UTjPcUtOBE&s=QVy675zngsIcy1A1eRnt_ARfTL_RQjtQrVKgkVga6Rk&e=>
2. The cert referenced above expires Sunday, May 1, 2016, which is in less than a month


Alex

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geotoolkit/attachments/20160406/956524e4/attachment.html>