Experimental Physics and
Industrial Control System

"Flaks, Leonid via Tech-talk" <[email protected]> · Thu, 2 May 2019 15:08:50 +0000

Thank you everybody for pointing out the issue.
I submitter request to our ITD. 

Leon

On 5/2/19, 10:00 AM, "Konrad, Martin" <[email protected]> wrote:

    Hi Leon,
    > This does look a bit tricky.  On our systems (RHEL7), the certificate
    > is trusted by firefox, but not by curl.
    A quick check revealed that BNL's web server isn't configured correctly.
    It is providing it's own certificate but not the chain of certificates
    up to the root certificate. If you happen to have the InCommon RSA
    Server CA installed on your client it will work anyway (that seems to be
    the case with Firefox which comes with its own certificate store) but if
    you use other tools it might not work.

    Please ask your sysadmin to fix this. I have attached the debugging
    output of OpenSSL of the BNL server along with the one of a correctly
    configured server (note the different "Certificate chain" sections). If
    you have difficulties convincing them that something is wrong point them
    to [1] which also reports the issues with the certificate chain.

    Cheers,

    Martin

    [1] https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ssllabs.com_ssltest_analyze.html-3Fd-3Depics.nsls2.bnl.gov&d=DwIFAg&c=aTOVZmpUfPKZuaG9NO7J7Mh6imZbfhL47t9CpZ-pCOw&r=AqgbVvJB57uIxxVMHC9FkQ&m=U1HLZEJlEfTZty86jYktsznTokw06OIGEyC9_gwYG7E&s=Zh8FCHZPWUYAL0sFxc6itzgJYuKhLH_ejDmORJzlnto&e=

    -- 
    Martin Konrad
    Facility for Rare Isotope Beams
    Michigan State University
    640 South Shaw Lane
    East Lansing, MI 48824-1321, USA
    Tel. 517-908-7253
    Email: [email protected]

Experimental Physics and Industrial Control System

Experimental Physics and
Industrial Control System