[Geoserver-devel] HTTPS certificate has expired for maven.geo-solutions.it

GeoServer GeoServer Developer
1

I’m getting build failures on Github due to the certificate being expired.

curl “https://maven.geo-solutions.it/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.pom”
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and

how to fix it, please visit the web page mentioned above.

If someone can fix it I’d be grateful,

cheers

Ian

···

Ian Turton

2

Good Morning Ian,

I’ll take a look and fix it. Thanks for the heads up

Regards,
Alessandro

···

Regards, Alessandro Parma == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Alessandro Parma DevOps Engineer GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) Italy phone: +39 340 4752467 fax: +39 0584 1660272 https://www.geosolutionsgroup.com https://twitter.com/geosolutions_it ------------------------------------------------------- Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.

3

It’s fixed now

Regards,
Alessandro

On Mon, Oct 3, 2022 at 9:32 AM Alessandro Parma <alessandro.parma@anonymised.com> wrote:

Good Morning Ian,

I’ll take a look and fix it. Thanks for the heads up

Regards,
Alessandro

On Mon, Oct 3, 2022 at 9:30 AM Ian Turton <ijturton@anonymised.com> wrote:

I’m getting build failures on Github due to the certificate being expired.

curl “https://maven.geo-solutions.it/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.pom”
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and

how to fix it, please visit the web page mentioned above.

If someone can fix it I’d be grateful,

cheers

Ian

–

Ian Turton

Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

–

Regards, Alessandro Parma == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Alessandro Parma DevOps Engineer GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) Italy phone: +39 340 4752467 fax: +39 0584 1660272 https://www.geosolutionsgroup.com https://twitter.com/geosolutions_it ------------------------------------------------------- Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.

–

Regards, Alessandro Parma == GeoServer Professional Services from the experts! Visit http://goo.gl/it488V for more information. == Alessandro Parma DevOps Engineer GeoSolutions S.A.S. Via di Montramito 3/A 55054 Massarosa (LU) Italy phone: +39 340 4752467 fax: +39 0584 1660272 https://www.geosolutionsgroup.com https://twitter.com/geosolutions_it ------------------------------------------------------- Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia. This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.

4

Great, thanks!

All seems to be working now

Ian

···

Ian Turton

5

Can we please remove this repo from our build; it is already cached from osgeo repo. Listing multiple repositories just slows us down …

···

–
Jody Garnett

6

Can we please remove this repo from our build; it is already cached from osgeo repo. Listing multiple repositories just slows us down …

We always welcome PRs for changes to the build process :slight_smile:

Ian

···

Ian Turton

7

Hi Jody,
checking with Alessandro, he had a simple, yet very much to the point, question… how did Ian stumble into the issue?
If OSGeo was mirroring the GeoSolutions fully, maven should not have contacted it for a specific file:

curl “https://maven.geo-solutions.it/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.pom”
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

I’m guessing that the OSGeo repository is only selectively mirroring the GeoSoutions repository. I cannot find such a file over there.
That jar is a customized json-lib that we created years ago to handle a vulnerability.

So, if someone wanted to remove the GeoSolutions repos from the build, before that, they’d have to allow full mirroring (or go for a hunt
of every jar we are not finding in the OSGeo repo) and ensure all branches of GeoServer that are still building on Jenkins
will still be able to build on an empty repo.

Cheers
Andrea

···

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39 339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail

8

Andrea:

Let me check; I did set up the different caches to be filtered. I can take that filter off if it is important to you.

  1. geo-solutions-cache is configured with routing rule: geosolutions-artifacts

  2. geosolutions-artifact routing rule has the following matchers:
    ^/it/geosolutions/jaiext/.*
    ^/it/geosolutions/imageio-ext/.
    ^/org/libjpegturbo/.*
    ^/com/oracle/.*
    ^/opendap/.*
    ^/me/steinborn/libdeflate-iava-core/.

  3. If there are additional dependencies required they should follow our third-party dependency policy (although apparently that is for geotools https://docs.geotools.org/latest/developer/procedures/add.htm ). I cannot find a similar policy for geoserver. The goal was to ensure that everything is available in one repository so we do not subject downstream applications to requiring several repositories (and slowing down their own build).

···

–
Jody Garnett

9

Hi Jody,
I do not have a list of artifacts that might be needed to successfully complete a build*, but indicated a method to get it (clean builds of
all branches being built, or even just clean build of the main ones, if you want to change only the pom there).

You indicated a desire to get that improved so… go ahead :smiley:

Cheers
Andrea

  • I did not even remember that json-lib customized jar existed, before Ian mentioned it
···

Regards,

Andrea Aime

==
GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39 339 8844549

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it

Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail

10

Fair enough:

Added the rules for json-lib and hibernate spatial … and it is working:

[INFO] Downloaded from osgeo-releases: https://repo.osgeo.org/repository/release/net/sf/json-lib/json-lib/2.4.2-geoserver/json-lib-2.4.2-geoserver.jar (137 kB at 1.1 MB/s)

···

Added to “build-it” PR: https://github.com/geoserver/geoserver/pull/6217

Jody Garnett