incubator-ooo-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From NoOp <gl...@sbcglobal.net>
Subject Re: Bad site certificate
Date Thu, 25 Oct 2012 21:16:35 GMT
On 10/25/2012 10:50 AM, Andrea Pescetti wrote:
> James Knott wrote:
>> Andrea Pescetti wrote:
>>> but we never advertise the HTTPS address.
>> It would be the same address as HTTP, but different port.
> 
> Obviously. But we've never stated anywhere that 
> https://www.openoffice.org exists and/or works. Add-ons just guess, find 
> something and try to retrieve it.

Then close port 443. But that of course would create issues for the 11
other domains on 140.211.11.131 - https redirects/results are in parens:

  	Domain Name
1 	APACHE-EXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
2 	APACHE.ORG.
(https://www.apache.org/)
3 	APACHECON.COM.
(http://apachecon.com/)
4 	APACHEEXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
5 	APACHEXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
6 	LIBCLOUD.COM.
(https://libcloud.apache.org/)
7 	LIBCLOUD.NET.
(https://libcloud.apache.org/)
8 	LIBCLOUD.ORG.
(https://libcloud.apache.org/)
9 	OPENOFFICE.ORG.
(www.openoffice.org uses an invalid security certificate)
10 	SUBVERSION.COM.
(https://subversion.apache.org/)
11 	SUBVERSION.NET.
(https://subversion.apache.org/)
12 	SUBVERSION.ORG.
(https://subversion.apache.org/)

and 5 other domains on 192.87.106.229:

  	Domain Name
1 	APACHE-EXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
2 	APACHE.ORG.
(https://www.apache.org/)
3 	APACHECON.COM.
(http://apachecon.com/)
4 	APACHEEXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
5 	APACHEXTRAS.ORG.
(https://code.google.com/a/apache-extras.org/hosting/)
6 	OPENOFFICE.ORG.
(www.openoffice.org uses an invalid security certificate)

HTTPS queries work without issue on all of those domains, including the
non apache named domains (libcloud.com etc) - with the exception of
openoffice.org. Openoffice.org is the odd man out... Perhaps a recent
change on the site enabled SSL but didn't configure SNI properly?

> 
> The recommended way to access the OpenOffice site in HTTPS for those who 
> prefer it over HTTP is to use:
> https://ooo-site.apache.org

Like the above, the URL should be configured to automatically redirect
to https://ooo-site.apache.org when an https request is received?
$ host ooo-site.apache.org
ooo-site.apache.org has address 140.211.11.131
ooo-site.apache.org has address 192.87.106.229
ooo-site.apache.org has IPv6 address 2001:610:1:80bc:192:87:106:229
> 
> This works and produces no warnings (of course, content is identical to 
> http://www.openoffice.org ); for more, see 
> https://issues.apache.org/jira/browse/INFRA-5450
> 
> Regards,
>    Andrea.
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: ooo-users-unsubscribe@incubator.apache.org
For additional commands, e-mail: ooo-users-help@incubator.apache.org


Mime
View raw message