[SAC] New form submission Contact

Committees SAC mailing list
1

Thank you Jon, our system administrators will be warned about this!

El dom., 19 may. 2019 23:19, Jon Szymaniak <info@osgeo.org> escribió:

Your full name
Jon Szymaniak
Your e-mail address
jon.szymaniak@gmail.com
Subject
TLS Certificate Issue
Category
Website
Message
Hi there,

I am submitting a couple patches to the Cartopy project to ensure HTTPS is used when downloading resources.

While working on these patches, I noticed that there appears to be an issue with the certificate served by https://vmap0.tiles.osgeo.org – the certificate is only valid for https://webextra.osgeo.osuosl.org. As a result, modern browsers and HTTP client libraries will perform the “safer” behavior of failing. Below is an example
from the Python Requests library exhibiting this behavior.

Best regards,
Jon Szymaniak

requests.exceptions.SSLError: HTTPSConnectionPool(host=‘vmap0.tiles.osgeo.org’, port=443): Max retries exceeded with url: /wms/vmap0?service=WMS&request=GetCapabilities&version=1.1.1 (Caused by SSLError(CertificateError(“hostname ‘vmap0.tiles.osgeo.org’ doesn’t match ‘webextra.osgeo.osuosl.org’”,),))

2

Looks like we missed 1 DNS entry in the HTTPS cert rollover.

Thanks,
Alex

-------- Forwarded Message --------
Subject: Re: [SAC] New form submission Contact
Date: Sun, 19 May 2019 23:21:59 +0200
From: María Arias de Reyna <delawen@gmail.com>
Reply-To: System Administration Committee Discussion/OSGeo
<sac@lists.osgeo.org>
To: jon.szymaniak@gmail.com
CC: info@osgeo.org

Thank you Jon, our system administrators will be warned about this!

El dom., 19 may. 2019 23:19, Jon Szymaniak <info@osgeo.org> escribió:

*Your full name*
  Jon Szymaniak
*Your e-mail address*
  jon.szymaniak@gmail.com
*Subject*
  TLS Certificate Issue
*Category*
  Website
*Message*
  Hi there,

I am submitting a couple patches to the Cartopy project to ensure HTTPS is
used when downloading resources.

While working on these patches, I noticed that there appears to be an
issue with the certificate served by https://vmap0.tiles.osgeo.org -- the
certificate is only valid for https://webextra.osgeo.osuosl.org. As a
result, modern browsers and HTTP client libraries will perform the "safer"
behavior of failing. Below is an example
from the Python Requests library exhibiting this behavior.

Best regards,
Jon Szymaniak

----

requests.exceptions.SSLError: HTTPSConnectionPool(host='
vmap0.tiles.osgeo.org', port=443): Max retries exceeded with url:
/wms/vmap0?service=WMS&request=GetCapabilities&version=1.1.1 (Caused by
SSLError(CertificateError("hostname 'vmap0.tiles.osgeo.org' doesn't match
'webextra.osgeo.osuosl.org'",),))

Attached Message Part (129 Bytes)