[SAC] [OSGeo] #2023: Suspected cert issue for some proxied sites

Committees SAC mailing list
1

#2023: Suspected cert issue for some proxied sites
---------------------------+-------------------
Reporter: bjornharrtell | Owner: sac@…
     Type: defect | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Keywords:
---------------------------+-------------------
Since some time the site https://git.osgeo.org/gitlab does not work. It is
proxied to an experimental external server, and the proxy seem to take
issue with the certs used.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2023&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

2

#2023: Suspected cert issue for some proxied sites
---------------------------+--------------------
Reporter: bjornharrtell | Owner: sac@…
     Type: defect | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Comment (by strk):

SSL Lab does not like the certificate either:
https://www.ssllabs.com/ssltest/analyze.html?d=vps306914.ovh.net

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2023#comment:1&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

3

#2023: Suspected cert issue for some proxied sites
---------------------------+--------------------
Reporter: bjornharrtell | Owner: sac@…
     Type: defect | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+--------------------

Comment (by strk):

SSLLab link shows the problem: Certificate is expired on August 13th 2017:

{{{
Valid until:
Sun, 13 Aug 2017 10:08:38 UTC (expired 2 months and 23 days ago) EXPIRED
}}}

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2023#comment:2&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

4

#2023: Suspected cert issue for some proxied sites
---------------------------+----------------------------
Reporter: bjornharrtell | Owner: bjornharrtell
     Type: defect | Status: new
Priority: normal | Milestone:
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------
Changes (by strk):

* owner: sac@… => bjornharrtell
* cc: sac@… (added)

Comment:

To clarify: the expired certificate is used on the contributed machine.
I'd recommend setting up certbot for obtaining and automatically renewing
SSL certificates from letsencrypt.org.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2023#comment:3&gt;
OSGeo <http://www.osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.