Opened 2 years ago

Closed 16 months ago

#13588 closed bug (fixed)

certificate for https://dev.haiku-os.org expired

Reported by: taos Owned by: haiku-web
Priority: normal Milestone: Unscheduled
Component: Website/Trac Version: R1/Development
Keywords: Cc:
Blocked By: Blocking:
Has a Patch: no Platform: All

Description

The certificate which is used for https://dev.haiku-os.org expired yesterday. I think the certificate for discuss.haiku-os.org and www.haiku-os.org has been already renewed (Firefox gave a warning this morning but not now).

Attachments (1)

cert_error_.png (144.9 KB) - added by Giova84 19 months ago.

Download all attachments as: .zip

Change History (32)

comment:1 Changed 2 years ago by taos

Sorry, the warning was for haiku-os.org which still uses the old expired certificate from GlobalSign whereas www.haiku-os.org uses a new one from Let's encrypt.

comment:2 Changed 2 years ago by waddlesplash

dev & i18n have been fixed; git & download are still broken.

comment:3 Changed 2 years ago by korli

Resolution: fixed
Status: newclosed

git & download have been fixed.

comment:4 Changed 19 months ago by CodeforEvolution

Resolution: fixed
Status: closedreopened

It seems the certificate has expired again...decided just to reopen this ticket, as there should really be an automated system doing this.

comment:5 Changed 19 months ago by diver

Resolution: fixed
Status: reopenedclosed

comment:6 Changed 19 months ago by korli

Resolution: fixed
Status: closedreopened

https://git.haiku-os.org/ has this ssl error: NET::ERR_CERT_DATE_INVALID

comment:7 Changed 19 months ago by mmlr

https://packages.haiku-os.org has the same problem and it breaks pkgman updates.

comment:8 Changed 19 months ago by kallisti5

Resolution: fixed
Status: reopenedclosed

fixed. We haven't moved over to the docker containers yet, so still manually propping up letsencrypt on SuSE (which it technically doesn't support)

We need to schedule the final migration to gerrit.

Changed 19 months ago by Giova84

Attachment: cert_error_.png added

comment:9 Changed 19 months ago by Giova84

I was attempting to update Haiku, and when I go to https://packages.haiku-os.org/haiku/master I get the following error about certificate:

https://dev.haiku-os.org/raw-attachment/ticket/13588/cert_error_.png

comment:10 Changed 19 months ago by Giova84

Resolution: fixed
Status: closedreopened

comment:11 Changed 19 months ago by mmlr

To clarify the above: https://packages.haiku-os.org/ itself is fine, but the specific haiku/master location redirects to https://download.haiku-os.org/haiku-repositories/master and that one has an expired certificate.

That WebPositive shows the error for packages.haiku-os.org also seems wrong.

comment:12 Changed 19 months ago by Giova84

This also prevent me to update Haiku: if i run pkgman update or pkgman full i just get "no error" as error message (LOL); yesterday I have been able to update Haiku, so is a recent issue about the certificate expired.

comment:13 Changed 19 months ago by kallisti5

I'm currently switching the https haiku-os.org -> www.haiku-os.org redirect over to our new server which should fix it. That redirect will be down for a few minutes while I generate certificates after the TTL's expire.

I'll take a look at renewing download.haiku-os.org in a few minutes.

comment:14 Changed 19 months ago by kallisti5

haiku-os.org redirect has been switched over. working on rest now.

comment:15 Changed 19 months ago by kallisti5

Resolution: fixed
Status: reopenedclosed

downloads + ports-mirror corrected.

Let's hope we're done with the migration to Maui before these expire again on the old server.

comment:16 Changed 19 months ago by Giova84

Currently I also get expired certificate for https://buildbot.haiku-os.org/.

comment:17 Changed 19 months ago by korli

Resolution: fixed
Status: closedreopened

comment:18 Changed 19 months ago by kallisti5

Resolution: fixed
Status: reopenedclosed

fixed. might have to clear caches.

comment:19 Changed 18 months ago by korli

Resolution: fixed
Status: closedreopened

Reopened for eu.hpkg.haiku-os.org

ERROR: cannot verify eu.hpkg.haiku-os.org's certificate, issued by ‘CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US’:
  Issued certificate has expired.

comment:20 Changed 18 months ago by mmlr

Resolution: fixed
Status: reopenedclosed

The crontab apparently was wrong. I've corrected it and renewed the certs for now.

comment:21 Changed 18 months ago by diver

https://haiku-files.org/files/optional-packages/

NET::ERR_CERT_AUTHORITY_INVALID

Subject: sni.dreamhost.com

Issuer: sni.dreamhost.com

Expires on: 8 Aug 2025

comment:22 Changed 18 months ago by kallisti5

That's not a cert issue. It looks like dreamhost killed our old hosting there. Do we even use haiku-files.org anymore for anything?

comment:23 Changed 18 months ago by kallisti5

oh, i guess we archive the *really* old images there...

https://download.haiku-os.org/nightly-images/x86_64/ (very bottom)

I guess we could grab a couple of random *old* releases, archive them on download.haiku-os.org, and then shutdown haiku-files.org

comment:24 in reply to:  22 Changed 18 months ago by luroh

Replying to Alexander von Gluck:

Do we even use haiku-files.org anymore for anything?

Firmwares, see #11841.

comment:25 Changed 18 months ago by kallisti5

ack. ok. I went ahead and moved some remaining old nightly images off of haiku-files and put them on download.haiku-os.org.

We can move the firmwares to download.haiku-os.org as well.

comment:26 Changed 16 months ago by taos

Resolution: fixed
Status: closedreopened

The certificate which is used for https://dev.haiku-os.org expired again today.

comment:27 Changed 16 months ago by kallisti5

Resolution: fixed
Status: reopenedclosed

resolved. Thanks for the heads up!

(as usual, maui renews automatically... so won't be an issue once we move dev over)

comment:28 Changed 16 months ago by korli

Resolution: fixed
Status: closedreopened

Please check the certificate for https://review.haiku-os.org/

comment:29 Changed 16 months ago by waddlesplash

Resolution: fixed
Status: reopenedclosed

That goes through a different system and so should have been another ticket. Fixed via https://github.com/haiku/infrastructure/compare/945d7f08e7e0...f6eaf1160fd6

comment:30 Changed 16 months ago by korli

Resolution: fixed
Status: closedreopened
Last edited 16 months ago by korli (previous) (diff)

comment:31 Changed 16 months ago by korli

Resolution: fixed
Status: reopenedclosed
Note: See TracTickets for help on using tickets.