Opened 2 years ago

Closed 19 months ago

#13588 closed bug (fixed)

certificate for https://dev.haiku-os.org expired

Reported by: taos Owned by: haiku-web
Priority: normal Milestone: Unscheduled
Component: Website/Trac Version: R1/Development
Keywords: Cc:
Blocked By: Blocking:
Has a Patch: no Platform: All

Description

The certificate which is used for https://dev.haiku-os.org expired yesterday. I think the certificate for discuss.haiku-os.org and www.haiku-os.org has been already renewed (Firefox gave a warning this morning but not now).

Attachments (1)

cert_error_.png (144.9 KB ) - added by Giova84 22 months ago.

Download all attachments as: .zip

Change History (32)

comment:1 by taos, 2 years ago

Sorry, the warning was for haiku-os.org which still uses the old expired certificate from GlobalSign whereas www.haiku-os.org uses a new one from Let's encrypt.

comment:2 by waddlesplash, 2 years ago

dev & i18n have been fixed; git & download are still broken.

comment:3 by korli, 2 years ago

Resolution: fixed
Status: newclosed

git & download have been fixed.

comment:4 by CodeforEvolution, 22 months ago

Resolution: fixed
Status: closedreopened

It seems the certificate has expired again...decided just to reopen this ticket, as there should really be an automated system doing this.

comment:5 by diver, 22 months ago

Resolution: fixed
Status: reopenedclosed

comment:6 by korli, 22 months ago

Resolution: fixed
Status: closedreopened

https://git.haiku-os.org/ has this ssl error: NET::ERR_CERT_DATE_INVALID

comment:7 by mmlr, 22 months ago

https://packages.haiku-os.org has the same problem and it breaks pkgman updates.

comment:8 by kallisti5, 22 months ago

Resolution: fixed
Status: reopenedclosed

fixed. We haven't moved over to the docker containers yet, so still manually propping up letsencrypt on SuSE (which it technically doesn't support)

We need to schedule the final migration to gerrit.

by Giova84, 22 months ago

Attachment: cert_error_.png added

comment:9 by Giova84, 22 months ago

I was attempting to update Haiku, and when I go to https://packages.haiku-os.org/haiku/master I get the following error about certificate:

https://dev.haiku-os.org/raw-attachment/ticket/13588/cert_error_.png

comment:10 by Giova84, 22 months ago

Resolution: fixed
Status: closedreopened

comment:11 by mmlr, 22 months ago

To clarify the above: https://packages.haiku-os.org/ itself is fine, but the specific haiku/master location redirects to https://download.haiku-os.org/haiku-repositories/master and that one has an expired certificate.

That WebPositive shows the error for packages.haiku-os.org also seems wrong.

comment:12 by Giova84, 22 months ago

This also prevent me to update Haiku: if i run pkgman update or pkgman full i just get "no error" as error message (LOL); yesterday I have been able to update Haiku, so is a recent issue about the certificate expired.

comment:13 by kallisti5, 22 months ago

I'm currently switching the https haiku-os.org -> www.haiku-os.org redirect over to our new server which should fix it. That redirect will be down for a few minutes while I generate certificates after the TTL's expire.

I'll take a look at renewing download.haiku-os.org in a few minutes.

comment:14 by kallisti5, 22 months ago

haiku-os.org redirect has been switched over. working on rest now.

comment:15 by kallisti5, 22 months ago

Resolution: fixed
Status: reopenedclosed

downloads + ports-mirror corrected.

Let's hope we're done with the migration to Maui before these expire again on the old server.

comment:16 by Giova84, 22 months ago

Currently I also get expired certificate for https://buildbot.haiku-os.org/.

comment:17 by korli, 22 months ago

Resolution: fixed
Status: closedreopened

comment:18 by kallisti5, 22 months ago

Resolution: fixed
Status: reopenedclosed

fixed. might have to clear caches.

comment:19 by korli, 21 months ago

Resolution: fixed
Status: closedreopened

Reopened for eu.hpkg.haiku-os.org

ERROR: cannot verify eu.hpkg.haiku-os.org's certificate, issued by ‘CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US’:
  Issued certificate has expired.

comment:20 by mmlr, 21 months ago

Resolution: fixed
Status: reopenedclosed

The crontab apparently was wrong. I've corrected it and renewed the certs for now.

comment:21 by diver, 21 months ago

https://haiku-files.org/files/optional-packages/

NET::ERR_CERT_AUTHORITY_INVALID

Subject: sni.dreamhost.com

Issuer: sni.dreamhost.com

Expires on: 8 Aug 2025

comment:22 by kallisti5, 21 months ago

That's not a cert issue. It looks like dreamhost killed our old hosting there. Do we even use haiku-files.org anymore for anything?

comment:23 by kallisti5, 21 months ago

oh, i guess we archive the *really* old images there...

https://download.haiku-os.org/nightly-images/x86_64/ (very bottom)

I guess we could grab a couple of random *old* releases, archive them on download.haiku-os.org, and then shutdown haiku-files.org

in reply to:  22 comment:24 by luroh, 21 months ago

Replying to Alexander von Gluck:

Do we even use haiku-files.org anymore for anything?

Firmwares, see #11841.

comment:25 by kallisti5, 21 months ago

ack. ok. I went ahead and moved some remaining old nightly images off of haiku-files and put them on download.haiku-os.org.

We can move the firmwares to download.haiku-os.org as well.

comment:26 by taos, 19 months ago

Resolution: fixed
Status: closedreopened

The certificate which is used for https://dev.haiku-os.org expired again today.

comment:27 by kallisti5, 19 months ago

Resolution: fixed
Status: reopenedclosed

resolved. Thanks for the heads up!

(as usual, maui renews automatically... so won't be an issue once we move dev over)

comment:28 by korli, 19 months ago

Resolution: fixed
Status: closedreopened

Please check the certificate for https://review.haiku-os.org/

comment:29 by waddlesplash, 19 months ago

Resolution: fixed
Status: reopenedclosed

That goes through a different system and so should have been another ticket. Fixed via https://github.com/haiku/infrastructure/compare/945d7f08e7e0...f6eaf1160fd6

comment:30 by korli, 19 months ago

Resolution: fixed
Status: closedreopened
Last edited 19 months ago by korli (previous) (diff)

comment:31 by korli, 19 months ago

Resolution: fixed
Status: reopenedclosed
Note: See TracTickets for help on using tickets.