#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2019-II
Component: Systems Admin | Keywords:
---------------------------+---------------------------------------
The curl and wget on old-adhoc is really old 7.26. For comparison tracsvn
which I already upgraded to jessie is at 7.38.
As a results https calls on old-adhoc using newer ciphers are failing.
I plan to do a test upgrade on a copy of old-adhoc on osgeo4 before doing
it on production one. Just to make sure I have accounted for all possible
issues.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2019-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------
Changes (by Jeff McKenna):
* cc: Jeff McKenna (added)
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:1>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2019-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------
Comment (by robe):
Added notes as Jeff pointed out
Doing this on old-adhoc fails
{{{
/usr/bin/curl --verbose https://demo.mapserver.org/
}}}
with:
{{{
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol
}}}
But this one succeeds:
{{{
/usr/bin/curl --verbose https://demo.pycsw.org/
}}}
Both are using letsencrypt ssl certs so perhaps the cyphers are different.
https://www.ssllabs.com/ssltest/analyze.html?d=demo.pycsw.org&latest
Returns an A+ rating
https://www.ssllabs.com/ssltest/analyze.html?d=demo.mapserver.org&latest
I figured out the difference -- demo.mapserver.org is pointing at
localhost so is using internal ssl cert which is probably expired and old.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2019-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------
Comment (by robe):
So getting rid of the entry in /etc/hosts fixed the immediate issue of
curl failure. I'm going to keep this open because needs an upgrade.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:3>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2020-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Changes (by robe):
* milestone: Sysadmin Contract 2019-II => Sysadmin Contract 2020-I
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:4>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2020-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Comment (by Jeff McKenna):
This is now a current blocker for the MapServer project (see ticket
#2459).
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:5>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2020-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------
Changes (by robe):
* milestone: Sysadmin Contract 2020-III => Sysadmin Contract 2020-II
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:8>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2021-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Changes (by robe):
* priority: blocker => normal
Comment:
A lot of things have been moved off old-adhoc so not as critical as it
was. In fact we may just retire it after we move everything off it.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:11>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2022-I
Component: Systems Admin | Resolution: wontfix
Keywords: |
---------------------------+---------------------------------------
Changes (by strk):
* status: new => closed
* resolution: => wontfix
Comment:
It looks like this is a won't fix, given old-adhoc was shutdown as for
#2678
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:14>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.