[SAC] [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl

[OSGeo]

#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------

Comment (by robe):

 Added notes as Jeff pointed out

 Doing this on old-adhoc fails



 {{{
  /usr/bin/curl --verbose https://demo.mapserver.org/
 }}}

 with:
 {{{
 curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
 protocol
 }}}


 But this one succeeds:

 {{{
   /usr/bin/curl --verbose https://demo.pycsw.org/
 }}}

 Both are using letsencrypt ssl certs so perhaps the cyphers are different.


 https://www.ssllabs.com/ssltest/analyze.html?d=demo.pycsw.org&latest
 Returns an A+ rating

 https://www.ssllabs.com/ssltest/analyze.html?d=demo.mapserver.org&latest



 I figured out the difference -- demo.mapserver.org is pointing at
 localhost so is using internal ssl cert which is probably expired and old.

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.