Create Task
Maniphest T3628

kde-files invalid https cert
Closed, ResolvedPublic
Actions

Description

Certificate is for *.opendesktop.org which fails to validate for *.kde-files.org

$ curl -v https://www.kde-files.org
* Rebuilt URL to: https://www.kde-files.org/
*   Trying 188.138.57.103...
* Connected to www.kde-files.org (188.138.57.103) port 443 (#0)
* found 173 certificates in /etc/ssl/certs/ca-certificates.crt
* found 697 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* gnutls_handshake() warning: The server name sent was not recognized
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
*        server certificate verification OK
*        server certificate status verification SKIPPED
* SSL: certificate subject name (*.opendesktop.org) does not match target host name 'www.kde-files.org'
* Closing connection 0
curl: (51) SSL: certificate subject name (*.opendesktop.org) does not match target host name 'www.kde-files.org'
sitter created this task.Sep 5 2016, 8:25 AM
starbuck added a subscriber: starbuck.Sep 5 2016, 8:46 AM

Kde-apps and kde-files are deprecated.
Kde-files is still up for legacy reasons, kde-apps has been superseeded by
linux-apps.com.

ronaldv claimed this task.Sep 8 2016, 8:28 AM
ronaldv moved this task from To Do to Done on the KDE Store board.Sep 13 2016, 8:36 AM
ronaldv added a comment.Sep 13 2016, 8:38 AM

This is an old hive-server. And there was never a ssl cert for this domain.

sitter added a subscriber: bcooksley.Sep 13 2016, 8:44 AM

It's possible that no one ever used it. Ben highlighted the issue when fixing our load balancing mirror RDFs

In T3609#52084, @bcooksley wrote:

the kde-apps-content file is out of date because https://www.kde-apps.org/ is completely broken.
Regular http:// works fine though.

kde-files.org works over http:// but once again is broken over https - with an invalid certificate none the less.

@bcooksley Did we ever use kde-files.org over https or did you only try that for good measure?

starbuck added a comment.Sep 13 2016, 8:53 AM

kde-look and kde-files are no longer in active use, they have been consolidated to store.kde.org.
kde-apps on the other side has been merged with qt-apps and gtk-apps, since keeping those seperate made no sense.

so the two remaining URLs in active use are store.kde.org for KDE and linux-apps.com for Opendesktop.

bcooksley added a comment.Sep 13 2016, 9:12 AM

I tried it for good measure.

Could you please suggest where I redirect / fetch the content for the following?

/dot/kde-apps-content.rdf
/kde-look-content.rdf
/kde-look-discussion.rdf
/kde-look-news.rdf
/kde-files-content.rdf

Please note that these URLs (currently on www.kde.org) are part of the Akregator default configuration stretching back to the 3.5 and earlier series, so they receive HEAVY traffic (several per second, constant, during European daytime). You will not want to be dynamically generating these files.

starbuck closed this task as Resolved.Dec 14 2016, 10:43 AM