[Geoserver-devel] Website certificate issue

GeoServer GeoServer Developer
1

Hi Folks,

The GeoServer website is giving me security certificate issues across all my browsers. Seems that the certificate is for some flavour of github.com rather than geoserver.org. May be worth taking a look at.

Cheers,

Jonathan

2

Do you have any more details, the domain is supposed to be transferred to osgeo. I am concerned that this has not been done.

The website is hosted on github pages…

–
Jody Garnett

On Fri, 5 Jun 2020 at 00:59, Jonathan Moules <jonathan-lists@anonymised.com.4460…> wrote:

Hi Folks,

The GeoServer website is giving me security certificate issues across
all my browsers. Seems that the certificate is for some flavour of
github.com rather than geoserver.org. May be worth taking a look at.

Cheers,

Jonathan

Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

3

Not a certificate expert, but as far as I can tell, the certificate is valid for the domain name github.com and its subdomains (so geoserver.github.com would probably work). The website domain name being “geoserver.org” this triggers the browsers:
"The servers name “geoserver.org” does not match the certficate’s name: www.github.com, *github.com, etc.

So it looks like the wrong certificate is being used/has been issued.

···

On 2020-06-05 18:39, Jody Garnett wrote:

Do you have any more details, the domain is supposed to be transferred to osgeo. I am concerned that this has not been done.

The website is hosted on github pages…

–
Jody Garnett

On Fri, 5 Jun 2020 at 00:59, Jonathan Moules <jonathan-lists@anonymised.com> wrote:

Hi Folks,

The GeoServer website is giving me security certificate issues across
all my browsers. Seems that the certificate is for some flavour of
github.com rather than geoserver.org. May be worth taking a look at.

Cheers,

Jonathan

Geoserver-devel mailing list
Geoserver-devel@anonymised.coms.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

4

I’m seeing the same thing. The certificate is for *github.com and so it doesn’t work. I assume most people have been using unsecure http and so didn’t notice.

It is odd that it’s a *.github.com certificate rather than a *.gihub.io certificate for GitHub Pages.

I know GitHub pages is able to automatically set up a LetsEncrypt certificate for sites it hosts with custom domains.

In the settings page for the GH Pages Repo I’m seeing these warnings:

The custom domain for your GitHub Pages site is pointed at an outdated IP address. You must update your site’s DNS records if you’d like it to be available via your custom domain. For more information, see

Enforce HTTPS — Unavailable for your site because your domain is not properly configured to support HTTPS

I think we need to make a change to the DNS records to allow GitHub Pages and LetsEncrypt to do their thing.

···

On 2020-06-05 10:39 a.m., Jody Garnett wrote:

Do you have any more details, the domain is supposed to be transferred to osgeo. I am concerned that this has not been done.

The website is hosted on github pages…

–
Jody Garnett

On Fri, 5 Jun 2020 at 00:59, Jonathan Moules <jonathan-lists@anonymised.com> wrote:

Hi Folks,

The GeoServer website is giving me security certificate issues across
all my browsers. Seems that the certificate is for some flavour of
github.com rather than geoserver.org. May be worth taking a look at.

Cheers,

Jonathan

Geoserver-devel mailing list
Geoserver-devel@anonymised.coms.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

_______________________________________________
Geoserver-devel mailing list
[Geoserver-devel@lists.sourceforge.net](mailto:Geoserver-devel@anonymised.comsourceforge.net)
[https://lists.sourceforge.net/lists/listinfo/geoserver-devel](https://lists.sourceforge.net/lists/listinfo/geoserver-devel)


-- 
Kevin Smith
[smithkm@anonymised.com](mailto:smithkm@anonymised.com)
5

I’m guessing there is only a CNAME record in the dns for geoserver.org, but that seems insufficient for an apex domain (see https://help.github.com/en/github/working-with-github-pages/managing-a-custom-domain-for-your-github-pages-site#configuring-an-apex-domain )

···

Disclaimer;
This message is just a reflection of what I thought at the time of sending. The message may contain information that is not intended for you or that you don’t understand.