[SAC] [OSGeo] #1633: Update OSGeo SSL certificate - if needed

OSGeo trac_osgeo at osgeo.org
Sun Jan 29 12:01:17 PST 2017


#1633: Update OSGeo SSL certificate - if needed
---------------------------------+--------------------
 Reporter:  msmitherdc           |       Owner:  sac@…
     Type:  task                 |      Status:  new
 Priority:  critical             |   Milestone:
Component:  Systems Admin        |  Resolution:
 Keywords:  ssl web certificate  |
---------------------------------+--------------------
Changes (by neteler):

 * priority:  normal => critical


Comment:

 Replying to [comment:3 wildintellect]:
 > I've created a new certificate good for 3 years (new vendor SSL.com).
 Account info is in the access file.

 This SSL certificate now rejected by Travis CI.

 See e.g. https://travis-ci.org/GRASS-GIS/grass-ci/jobs/196398204

 {{{
 ==> Cloning https://svn.osgeo.org/grass/grass/trunk

 Error validating server certificate for 'https://svn.osgeo.org:443':

  - The certificate is not issued by a trusted authority. Use the
 fingerprint to validate the certificate manually!

 Certificate information:
  - Hostname: *.osgeo.org
  - Valid: from Thu, 28 Apr 2016 00:00:00 GMT until Wed, 01 May 2019
 23:59:59 GMT
  - Issuer: www.ssl.com, SSL.com, US
  - Fingerprint:
 56:50:0d:63:0f:47:10:92:7a:3a:b5:a9:83:f8:97:92:fe:d6:19:95

 (R)eject, accept (t)emporarily or accept (p)ermanently? svn: E175002:
 Unable to connect to a repository at URL
 'https://svn.osgeo.org/grass/grass/trunk'

 svn: E175002: OPTIONS of 'https://svn.osgeo.org/grass/grass/trunk': Server
 certificate verification failed: issuer is not trusted
 (https://svn.osgeo.org)

 Error: Failed to download resource "grass-trunk"
 }}}


 Quality check:

 https://www.ssllabs.com/ssltest/analyze.html?d=svn.osgeo.org

 --> Overall Rating: C

 Time to switch to https://letsencrypt.org/ (eg with certbot)?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/1633#comment:5>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list