[OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

[OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl

OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+---------------------------------------
 Reporter:  robe           |      Owner:  sac@…
     Type:  task           |     Status:  new
 Priority:  blocker        |  Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |   Keywords:
---------------------------+---------------------------------------
 The curl and wget on old-adhoc is really old 7.26.  For comparison tracsvn
 which I already upgraded to jessie is at 7.38.

 As a results https calls on old-adhoc using newer ciphers are failing.

 I plan to do a test upgrade on a copy of old-adhoc on osgeo4 before doing
 it on production one.  Just to make sure I have accounted for all possible
 issues.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac
Reply | Threaded
Open this post in threaded view
|

Re: [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl

OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------
Changes (by Jeff McKenna):

 * cc: Jeff McKenna (added)


--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:1>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac
Reply | Threaded
Open this post in threaded view
|

Re: [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl

OSGeo
In reply to this post by OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie and upgrade the curl
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------

Comment (by robe):

 Added notes as Jeff pointed out

 Doing this on old-adhoc fails



 {{{
  /usr/bin/curl --verbose https://demo.mapserver.org/
 }}}

 with:
 {{{
 curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
 protocol
 }}}


 But this one succeeds:

 {{{
   /usr/bin/curl --verbose https://demo.pycsw.org/
 }}}

 Both are using letsencrypt ssl certs so perhaps the cyphers are different.


 https://www.ssllabs.com/ssltest/analyze.html?d=demo.pycsw.org&latest
 Returns an A+ rating

 https://www.ssllabs.com/ssltest/analyze.html?d=demo.mapserver.org&latest



 I figured out the difference -- demo.mapserver.org is pointing at
 localhost so is using internal ssl cert which is probably expired and old.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac
Reply | Threaded
Open this post in threaded view
|

Re: [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie (was: Upgrade old-adhoc from wheezy to jessie and upgrade the curl)

OSGeo
In reply to this post by OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2019-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------

Comment (by robe):

 So getting rid of the entry in /etc/hosts fixed the immediate issue of
 curl failure.  I'm going to keep this open because needs an upgrade.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:3>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac
Reply | Threaded
Open this post in threaded view
|

Re: [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie

OSGeo
In reply to this post by OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2020-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------
Changes (by robe):

 * milestone:  Sysadmin Contract 2019-II => Sysadmin Contract 2020-I


--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:4>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac
Reply | Threaded
Open this post in threaded view
|

Re: [OSGeo] #2384: Upgrade old-adhoc from wheezy to jessie

OSGeo
In reply to this post by OSGeo
#2384: Upgrade old-adhoc from wheezy to jessie
---------------------------+---------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2020-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------

Comment (by Jeff McKenna):

 This is now a current blocker for the MapServer project (see ticket
 #2459).

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2384#comment:5>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac