After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 639893 - SSL does not work for library.gnome.org
SSL does not work for library.gnome.org
Status: RESOLVED FIXED
Product: sysadmin
Classification: Infrastructure
Component: Other
unspecified
Other Linux
: Normal normal
: ---
Assigned To: GNOME Sysadmins
GNOME Sysadmins
Depends on:
Blocks:
 
 
Reported: 2011-01-18 21:05 UTC by Rodney Dawes
Modified: 2013-03-06 13:12 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Rodney Dawes 2011-01-18 21:05:34 UTC 
The https://library.gnome.org/ URL does not load properly. It presents an invalid certificate (which is only valid for www.gnome.org), and if validation is skipped, presents the default RHEL apache installed web site.

Please get a new certificate for the library domain, or add the domain to the existing certificate, and point the apache config at the proper web site location.
Comment 1 Jeff Schroeder 2011-03-28 06:07:33 UTC 
Just out of curiosity, is there a reason it actually needs to use ssl in the first place?
Comment 2 Rodney Dawes 2011-03-28 13:25:27 UTC 
I don't know. I didn't configure the site. If HTTPS is going to load anything, it should load the right thing, and have a valid certificate, though.
Comment 3 Olav Vitters 2011-03-28 14:00:56 UTC 
Actually, no.

If you put https it just means it'll connect to the IP address. If the vhost doesn't have https configured, it'll show another site. 

If you are using Internet Explorer on Windows XP it is even nicer. It flat out doesn't support multiple https sites on one IP address.

Seems we can restrict it somewhat though:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslstrictsnivhostcheck

Turning that on means we block all people who use:
 * Safari/Internet Explorer on Windows XP
 * Konqueror
 * various mobile browsers
Comment 4 Andrea Veri 2013-03-06 13:12:29 UTC 
library.gnome.org has SSL enabled now, that together with both developer.gnome.org and help.gnome.org.