Launchpad itself

Invalid SSL certificate when trying to probe mirrors.c0urier.net:443

Asked by Glenn B. Jakobsen

Hi Launchpad

Why is the scanner claiming that the SSL certificate is invalid, I just tested to run it through ssllabs.com and it gives an A+ rating.
https://www.ssllabs.com/ssltest/analyze.html?d=mirrors.c0urier.net

Any help would be greatly appreciated.

// Glenn

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Glenn B. Jakobsen (c0urier) said : 		#1

Latest probe log file:
https://launchpadlibrarian.net/731681211/mirrors.c0urier.net-archive-probe-logfile.txt

Revision history for this message
Guruprasad (lgp171188) said : 		#2

Hi Glenn, thanks for reporting this issue to us. This is a known issue in Launchpad. See https://bugs.launchpad.net/launchpad/+bug/1885585. Till this issue is fixed, some mirror owners have worked around this issue by enabling and setting an HTTP URL for the mirror. If that is a valid option for your mirror, please consider it.

Revision history for this message
Glenn B. Jakobsen (c0urier) said (last edit ): 		#3

Hi Guruprasad

I have both http and https, but for some reason it only validates the https mirror. Is it possible for it to only do the validation over http? Else I'll follow the others suggestions and disable https for now.

Revision history for this message
Guruprasad (lgp171188) said : 		#4

Hi Glenn, I do not see an HTTPS mirror URL in https://launchpad.net/ubuntu/+mirror/mirrors.c0urier.net-archive any more. Did you update the mirror settings after the discussion here?

> Is it possible for it to only do the validation over http?

I don't think it is possible. Afaik, the mirror prober validates all the given URLs for a mirror. Even if it only validated the http URL, it cannot and will not assume that the same content is served from the https URL.

Revision history for this message
Glenn B. Jakobsen (c0urier) said : 		#5

Yes I removed the https link.

Fair enough, lets hope for a fix in a near future - I hope it's OK I linked this bug with the one your referred to. Have a nice day ahead.

Can you help with this problem?

Provide an answer of your own, or ask Glenn B. Jakobsen for more information if necessary.

To post a message you must log in.