Thank you everybody for pointing out the issue.
I submitter request to our ITD.
Leon
On 5/2/19, 10:00 AM, "Konrad, Martin" <[email protected]> wrote:
Hi Leon,
> This does look a bit tricky. On our systems (RHEL7), the certificate
> is trusted by firefox, but not by curl.
A quick check revealed that BNL's web server isn't configured correctly.
It is providing it's own certificate but not the chain of certificates
up to the root certificate. If you happen to have the InCommon RSA
Server CA installed on your client it will work anyway (that seems to be
the case with Firefox which comes with its own certificate store) but if
you use other tools it might not work.
Please ask your sysadmin to fix this. I have attached the debugging
output of OpenSSL of the BNL server along with the one of a correctly
configured server (note the different "Certificate chain" sections). If
you have difficulties convincing them that something is wrong point them
to [1] which also reports the issues with the certificate chain.
Cheers,
Martin
[1] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ssllabs.com_ssltest_analyze.html-3Fd-3Depics.nsls2.bnl.gov&d=DwIFAg&c=aTOVZmpUfPKZuaG9NO7J7Mh6imZbfhL47t9CpZ-pCOw&r=AqgbVvJB57uIxxVMHC9FkQ&m=U1HLZEJlEfTZty86jYktsznTokw06OIGEyC9_gwYG7E&s=Zh8FCHZPWUYAL0sFxc6itzgJYuKhLH_ejDmORJzlnto&e=
--
Martin Konrad
Facility for Rare Isotope Beams
Michigan State University
640 South Shaw Lane
East Lansing, MI 48824-1321, USA
Tel. 517-908-7253
Email: [email protected]
- References:
- Problem with NSLS2 Debian repository? Mark Rivers via Tech-talk
- Re: Problem with NSLS2 Debian repository? Flaks, Leonid via Tech-talk
- RE: Problem with NSLS2 Debian repository? Mark Rivers via Tech-talk
- Re: Problem with NSLS2 Debian repository? Flaks, Leonid via Tech-talk
- RE: Problem with NSLS2 Debian repository? tom.cobb--- via Tech-talk
- Re: Problem with NSLS2 Debian repository? Flaks, Leonid via Tech-talk
- Re: Problem with NSLS2 Debian repository? Konrad, Martin via Tech-talk
- Navigate by Date:
- Prev:
Re: Problem with NSLS2 Debian repository? Konrad, Martin via Tech-talk
- Next:
Software Engineer position in LIGO Hanks, Jonathan via Tech-talk
- Index:
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
<2019>
2020
2021
2022
2023
2024
- Navigate by Thread:
- Prev:
Re: Problem with NSLS2 Debian repository? Konrad, Martin via Tech-talk
- Next:
EPICS 7 incompatibility in errMdef.h Dirk Zimoch via Tech-talk
- Index:
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
<2019>
2020
2021
2022
2023
2024
|