Hi,
Thanks for the report, the "content.scientificlinux.org" links shouldn't
be there.....
I'll take a look.
Pat
On 06/08/2015 09:27 AM, Hogben, Colin H wrote:
Hi,
I'm having problems accessing the Scientific Linux web site. Many of
the resources linked from www.scientificlinux.org are pages on
https://content.scientificlinux.org but there appear to be two
problems with SSL configuration on the server side for this host.
Firstly, the server certificate is not valid for the hostname
content.scientificlinux.org - Firefox reports:
content.scientificlinux.org uses an invalid security certificate.
The certificate is only valid for the following names:
uhosts.fnal.gov , cd-docdb.fnal.gov , osg-docdb.opensciencegrid.org
, www.darkenergysurvey.org , www.usluo.org , www.scientificlinux.org ,
staging.scientificlinux.org , www.uslua.org
(Error code: ssl_error_bad_cert_domain)
Secondly, even if you click through the warnings and accept the
invalid certificate, the SSL handshake fails, apparently because the
server is requesting a client certificate. Firefox reports:
Secure Connection Failed
An error occurred during a connection to content.scientificlinux.org.
SSL peer was unable to negotiate an acceptable set of security
parameters.
(Error code: ssl_error_handshake_failure_alert)
I found a workaround: when the browser displays its error message,
manually replace "content" with "www" in the address bar. However
this is tedious to say the least!
I hope someone can sort out this certificate problem, as I think it
reflects badly on a great project.
Regards,
--
Pat Riehecky
Scientific Linux developer
Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org
