certificate for https://dev.haiku-os.org expired

[taos]

The certificate which is used for https://dev.haiku-os.org expired yesterday. I think the certificate for discuss.haiku-os.org and www.haiku-os.org has been already renewed (Firefox gave a warning this morning but not now).

[taos]

Sorry, the warning was for haiku-os.org which still uses the old expired certificate from GlobalSign whereas www.haiku-os.org uses a new one from Let's encrypt.

[waddlesplash]

dev & i18n have been fixed; git & download are still broken.

[korli]

git & download have been fixed.

[CodeforEvolution]

It seems the certificate has expired again...decided just to reopen this ticket, as there should really be an automated system doing this.

[korli]

​https://git.haiku-os.org/ has this ssl error: NET::ERR_CERT_DATE_INVALID

[mmlr]

​https://packages.haiku-os.org has the same problem and it breaks pkgman updates.

[kallisti5]

fixed. We haven't moved over to the docker containers yet, so still manually propping up letsencrypt on SuSE (which it technically doesn't support)

We need to schedule the final migration to gerrit.

[Giova84]

I was attempting to update Haiku, and when I go to ​https://packages.haiku-os.org/haiku/master I get the following error about certificate:

[mmlr]

To clarify the above: ​https://packages.haiku-os.org/ itself is fine, but the specific haiku/master location redirects to ​https://download.haiku-os.org/haiku-repositories/master and that one has an expired certificate.

That WebPositive shows the error for packages.haiku-os.org also seems wrong.

[Giova84]

This also prevent me to update Haiku: if i run pkgman update or pkgman full i just get "no error" as error message (LOL); yesterday I have been able to update Haiku, so is a recent issue about the certificate expired.

[kallisti5]

I'm currently switching the https haiku-os.org -> www.haiku-os.org redirect over to our new server which should fix it. That redirect will be down for a few minutes while I generate certificates after the TTL's expire.

I'll take a look at renewing download.haiku-os.org in a few minutes.

[kallisti5]

haiku-os.org redirect has been switched over. working on rest now.

[kallisti5]

downloads + ports-mirror corrected.

Let's hope we're done with the migration to Maui before these expire again on the old server.

[Giova84]

Currently I also get expired certificate for ​https://buildbot.haiku-os.org/.

[kallisti5]

fixed. might have to clear caches.

[korli]

Reopened for eu.hpkg.haiku-os.org

ERROR: cannot verify eu.hpkg.haiku-os.org's certificate, issued by ‘CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US’:
  Issued certificate has expired.

[mmlr]

The crontab apparently was wrong. I've corrected it and renewed the certs for now.

[diver]

​https://haiku-files.org/files/optional-packages/

NET::ERR_CERT_AUTHORITY_INVALID

Subject: sni.dreamhost.com

Issuer: sni.dreamhost.com

Expires on: 8 Aug 2025

[kallisti5]

That's not a cert issue. It looks like dreamhost killed our old hosting there. Do we even use haiku-files.org anymore for anything?

[kallisti5]

oh, i guess we archive the *really* old images there...

​https://download.haiku-os.org/nightly-images/x86_64/ (very bottom)

I guess we could grab a couple of random *old* releases, archive them on download.haiku-os.org, and then shutdown haiku-files.org

[luroh]

Replying to Alexander von Gluck:

Do we even use haiku-files.org anymore for anything?

Firmwares, see #11841.

[kallisti5]

ack. ok. I went ahead and moved some remaining old nightly images off of haiku-files and put them on download.haiku-os.org.

We can move the firmwares to download.haiku-os.org as well.

[taos]

The certificate which is used for https://dev.haiku-os.org expired again today.

[kallisti5]

resolved. Thanks for the heads up!

(as usual, maui renews automatically... so won't be an issue once we move dev over)

[korli]

Please check the certificate for ​https://review.haiku-os.org/

[waddlesplash]

That goes through a different system and so should have been another ticket. Fixed via ​https://github.com/haiku/infrastructure/compare/945d7f08e7e0...f6eaf1160fd6

[korli]

Please check the certificate for ​https://packages.haiku-os.org/ and ​https://depot.haiku-os.org/