OpenOffice crash upon check for update
TL; DR OpenOffice crashes upon check for update. Automatic check
crashes after ~30 s. Manual check crashes immediately.
Possible cause: it appears that Apache's SSL certificate expired,
for the web page which tells the latest OpenOffice version.
System under test:
- OpenOffice 4.1.11 (also 4.1.10 and 4.1.7(?), not shown).
- MacBook Air, macOs Mojave, Version 10.14.6.
- Safari browser, Version 14.1.2.
Steps to duplicate problem:
- OpenOffice menu, Preferences... item, Online Update item, Check now
button.
- boom!
Alternate steps to duplicate problem:
- OpenOffice menu, Preferences... item, Online Update item, Check
for updates automatically check box, Every Day radio button.
- quit OpenOffice
- rerun OpenOffice
- wait ~30 s, boom!
Workaround to prevent problem:
- OpenOffice menu, Preferences... item, Online Update item,
set Check for updates automatically check box to unchecked.
- wait for crash, or quit OpenOffice
- rerun OpenOffice
- should run for indefinitely long time.
Related info:
$ cat /Applications/OpenOffice.app/Contents/MacOS/versionrc # says:
[Version]
...snip...
UpdateURL=https://ooo-updates.apache.org/aoo4111/check.Update?pkgfmt=dmg
...snip...
$ curl https://ooo-updates.apache.org/aoo4111/check.Update # says:
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
HTTPS-proxy has similar options --proxy-cacert and --proxy-insecure.
$ # -k insecure, not recommended for production
$ curl -k https://ooo-updates.apache.org/aoo4111/check.Update # not
recommended, but says:
<?xml version="1.0" encoding="UTF-8"?>
<!-- Product Update Feed for AOO 4.1.11 instances -->
<inst:description xmlns:inst="
http://installation.openoffice.org/description";>
</inst:description>
Comment:
(Did not see this issue already in bugzilla. Found the idea in OO support
FAQs.)
