Opened 4 years ago

Closed 2 years ago

#2384 closed task (wontfix)

Upgrade old-adhoc from wheezy to jessie

Reported by: robe Owned by: sac@…
Priority: normal Milestone: Sysadmin Contract 2022-I
Component: SysAdmin Keywords:
Cc: Jeff McKenna

Description

The curl and wget on old-adhoc is really old 7.26. For comparison tracsvn which I already upgraded to jessie is at 7.38.

As a results https calls on old-adhoc using newer ciphers are failing.

I plan to do a test upgrade on a copy of old-adhoc on osgeo4 before doing it on production one. Just to make sure I have accounted for all possible issues.

Change History (14)

comment:1 by Jeff McKenna, 4 years ago

Cc: Jeff McKenna added

comment:2 by robe, 4 years ago

Added notes as Jeff pointed out

Doing this on old-adhoc fails

 /usr/bin/curl --verbose https://demo.mapserver.org/

with:

curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

But this one succeeds:

  /usr/bin/curl --verbose https://demo.pycsw.org/

Both are using letsencrypt ssl certs so perhaps the cyphers are different.

https://www.ssllabs.com/ssltest/analyze.html?d=demo.pycsw.org&latest Returns an A+ rating

https://www.ssllabs.com/ssltest/analyze.html?d=demo.mapserver.org&latest

I figured out the difference -- demo.mapserver.org is pointing at localhost so is using internal ssl cert which is probably expired and old.

comment:3 by robe, 4 years ago

Summary: Upgrade old-adhoc from wheezy to jessie and upgrade the curlUpgrade old-adhoc from wheezy to jessie

So getting rid of the entry in /etc/hosts fixed the immediate issue of curl failure. I'm going to keep this open because needs an upgrade.

comment:4 by robe, 4 years ago

Milestone: Sysadmin Contract 2019-IISysadmin Contract 2020-I

comment:5 by Jeff McKenna, 4 years ago

This is now a current blocker for the MapServer project (see ticket #2459).

comment:6 by robe, 3 years ago

Milestone: Sysadmin Contract 2020-ISysadmin Contract 2020-II

move open times to new contract

comment:7 by robe, 3 years ago

Milestone: Sysadmin Contract 2020-IISysadmin Contract 2020-III

oops moved to wrong milestone last run

comment:8 by robe, 3 years ago

Milestone: Sysadmin Contract 2020-IIISysadmin Contract 2020-II

comment:9 by strk, 3 years ago

Milestone: Sysadmin Contract 2020-IISysadmin Contract 2020-III

Ticket retargeted after milestone closed

comment:10 by robe, 3 years ago

Milestone: Sysadmin Contract 2020-IIISysadmin Contract 2021-I

Milestone renamed

comment:11 by robe, 3 years ago

Priority: blockernormal

A lot of things have been moved off old-adhoc so not as critical as it was. In fact we may just retire it after we move everything off it.

comment:12 by robe, 3 years ago

Milestone: Sysadmin Contract 2021-ISysadmin Contract 2021-II

Move these to next contract milestone

comment:13 by strk, 2 years ago

Milestone: Sysadmin Contract 2021-IISysadmin Contract 2022-I

Ticket retargeted after milestone closed

comment:14 by strk, 2 years ago

Resolution: wontfix
Status: newclosed

It looks like this is a won't fix, given old-adhoc was shutdown as for #2678

Note: See TracTickets for help on using tickets.