Opened 7 years ago

Last modified 3 years ago

#16123 new task

External Imagery/Styles/Presets/Plugins/Rules https — at Version 101

Reported by: stoecker Owned by: team
Priority: normal Milestone: Longterm
Component: External imagery source Version:
Keywords: https Cc: Klumbumbus, Don-vip

Description (last modified by stoecker)

This ticket is for tracking progress of http → https switch for external data. For list of ignores see IntegrationTestIgnores page.

Recent state: (138 answer on port 443 and 84 [not in this list] don't answer on port 443)

  • adam.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017 # MAP:openstreetmap.hu orthophotosopenstreetmap.hu ortofotók
  • baskinrobbins.ru [200 OK]: PRESET:russian_shops.xml
  • beta.hackfoldr.org [200 OK]: PRESET:TaiwanOnly.xml
  • center-obuv.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • coffeehouse.ru [200 OK]: PRESET:russian_shops.xml
  • commons.wikimedia.org [301 Moved Permanently]: PRESET:Presets_Sport.xml
  • cu.bgfretail.com [200 OK]: PRESET:Preset.zip
  • data.virginia.gov [Error hostname verification failed] :MAP:Virginia Building Footprints # MAP:Virginia Imagery Service - Most Recent # MAP:Virginia Property Lines
  • data.vorarlberg.gv.at [Error hostname verification failed] :MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
  • datos.minem.gob.ar [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Ministry of Energy and Mining (WMS)Ministerio de Energía y Minería (WMS)
  • dev.openseamap.org [Error hostname verification failed] :PRESET:INT-1-preset.xml # PRESET:Presets_Hafen.xml # PRESET:Presets_Sport.xml # WIKIPRESET:Presets_Diving-preset.zip
  • double-b.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • dunkindonutsmoscow.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
  • e-odgik.chorzow.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Chorzów: Buildings
  • e.tile.openstreetmap.hu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:EUFAR Balaton orthophotos # MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005 # MAP:Szeged orthophoto 2011Szeged ortofotó 2011
  • egp.gu.gov.si [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GURS: Building outlinesGURS: Tlorisi zgradb # MAP:GURS: DOF050 Ortofoto, DTK5... (WMTS) # MAP:GURS: Road linesGURS: Osi cest
  • elecsnet.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • emapa.katowice.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Katowice: Orthophotomap (aerial image)
  • forum.openstreetmap.org [200 OK]: PRESET:Presets_access_PL-preset.xml
  • fototerkep.hu [Error hostname verification failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017
  • geolittoral.din.developpement-durable.gouv.fr [Error Connection reset by peer] :MAP:Géolittoral - Orthophotos 2000 # MAP:Géolittoral - Sentiers # MAP:Géolittoral V2 - Orthophotos 2011-2014
  • glowsubs.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • h.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • hochicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • i-favorite.ru [200 OK]: PRESET:russian_shops.xml
  • i.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • ide.agroindustria.gob.ar [Error hostname verification failed] :MAP:Ministry of Agroindustry (WMS)Ministerio de Agroindustria (WMS)
  • ilpatio.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • j.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • jangmonim.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • josm.openstreetmap.de [200 Ok]: PRESET:Presets_Sport.xml # STYLE:FreieTonne_rules_presets.zip
  • kolesar.turistautak.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :STYLE:cellid.mapcss # STYLE:measurements.mapcss # STYLE:signal-size.mapcss
  • letoile-ru.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • line.me [302 Found]: PRESET:russian_shops.xml
  • maps.stamen.com [Error hostname verification failed] :MAP:Stamen Terrain
  • mil.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • msip-mapa.um.gliwice.pl [Error hostname verification failed] :MAP:Gliwice: Buildings # MAP:Gliwice: Orthophotomap 2013 (aerial image)
  • openclipart.org [404 Not Found]: PRESET:Presets_Sport.xml
  • opendata.grandnancy.eu [Error hostname verification failed] :MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016
  • openstreetmap.tw [301 Moved Permanently]: PRESET:TaiwanOnly.xml
  • oriflamepro.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • orto.wms.itacyl.es [Error hostname verification failed] :MAP:ITACyL - Castile and León
  • osm.flossk.org [521 Origin Down]: MAP:Kosovo AKK roads # MAP:Kosovo AKK roads with a name that is missing in OSM
  • ovc.catastro.meh.es [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Catastro Spain
  • overpass-turbo.eu [200 OK]: RULE:Rules_Brazilian-Specific.validator.mapcss
  • parking.mos.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • pensionnij-fond.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • pncg.co.kr [200 OK]: PRESET:Preset.zip
  • przemas75.github.io [404 Not Found]: PRESET:Presets_access_PL-preset.xml
  • raw.githubusercontent.com [301 Moved Permanently]: STYLE:INT1_Seamark.mapcss
  • roskazna.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • roskazna.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • rosstatistika.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • sdobin.ru [200 OK]: PRESET:russian_shops.xml
  • shoko.ru [200 OK]: PRESET:russian_shops.xml
  • siglon.londrina.pr.gov.br [200 OK]: MAP:Londrina Ortofoto 2011
  • smeshnie-ceny.ru [200 OK]: PRESET:russian_shops.xml
  • speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
  • stolichki.ru [200 OK]: PRESET:russian_shops.xml
  • subway.ru [200 OK]: PRESET:russian_shops.xml
  • terinfo.ujbuda.hu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Budapest district XI orthophoto 2015Budapest XI. kerület ortofotó 2015 # MAP:Budapest district XI orthophoto 2017Budapest XI. kerület ortofotó 2017
  • tiles.itoworld.com [302 Found]: MAP:OS OpenData Locator
  • topgunbarbershop.ru [200 OK]: PRESET:russian_shops.xml
  • trac.openstreetmap.org [200 Ok]: STYLE:mapnik.zip
  • ttobongee.com [Error hostname verification failed] :PRESET:Preset.zip
  • victoria-group.ru [200 OK]: PRESET:russian_shops.xml
  • vkusvill.ru [200 OK]: PRESET:russian_shops.xml
  • vogis.cnv.at [503 Service Unavailable]: MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
  • wiki.openstreetmap.org [301 Moved Permanently]: PLUGIN:Tracer-testing.jar # PLUGIN:contourmerge.jar # PLUGIN:fieldpapers.jar # PLUGIN:mbtiles.jar # PRESET:Presets_Sport.xml # PRESET:TaiwanOnly.xml # PRESET:transformap.xml # PRESET:windrad.xml # STYLE:CEVNI_MapCSS.mapcss # STYLE:electrified.zip
  • wikimapia.org [200 OK]: PRESET:russian_shops.xml
  • wms.openstreetmap.fr [Error hostname verification failed] :MAP:Alpes-Maritimes 2009 # MAP:Alpes-de-Haute-Provence 2010 # MAP:Bayonne - 2016 # MAP:Bordeaux - 2012 # MAP:Bouches-du-Rhône 2009 # MAP:Brest - 2004 # MAP:Drone Imagery (Haiti) # MAP:Drone Imagery 2014 (Haiti) # MAP:Drone Imagery Canaan(Haiti) November 2015 # MAP:Hautes-Alpes 2010 # MAP:Lyon Orthophoto 2015-05 8cm # MAP:Lyon Orthophoto 8cm # MAP:Mulhouse - 2018 # MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016 # MAP:Ortho HR # MAP:Ortho HR 2013 # MAP:Ortho HR 2014 # MAP:Ortho HR 2015 # MAP:Ortho HR 2016 # MAP:Ortho HR 2017 # MAP:Rennes - 2014 # MAP:Toulouse - Orthophotoplan 2007 # MAP:Toulouse - Orthophotoplan 2011 # MAP:Toulouse - Orthophotoplan 2013 # MAP:Toulouse - Orthophotoplan 2015 # MAP:Toulouse - Orthophotoplan 2017 # MAP:Tours - Orthophotos 2008-2010 # MAP:Tours - Orthophotos 2013 # MAP:Vaucluse 2010 # MAP:Vercors (Réserve naturelle des Hauts-Plateaux du Vercors) - Orthophoto - 1999 - 1 m
  • wms1.geopoz.poznan.pl [Error No route to host] :MAP:Poznań: Orthophotomap 2014 (aerial image) # MAP:Poznań: Orthophotomap 2016 (aerial image)
  • www.9922.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.ajuker.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.are.zh.ch [Error hostname verification failed] :MAP:Kanton Zürich Orthophoto 2018 10cm # MAP:Kanton Zürich Orthophotos 2014/2015 10cm # MAP:Kanton Zürich Orthophotos 2015/2016 10cm
  • www.ataksupermarket.ru [Error SSL connect attempt failed error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error] :PRESET:russian_shops.xml
  • www.avoska.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
  • www.billa.ru [200 OK]: PRESET:russian_shops.xml
  • www.bonjuk.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.boor.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.burgerking.co.kr [200 OK]: PRESET:Preset.zip
  • www.caffe-pascucci.co.kr [302 Object moved]: PRESET:Preset.zip
  • www.central-ppk.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.cheogajip.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.citypharm.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.coffeebeankorea.com [301 Moved Permanently]: PRESET:Preset.zip
  • www.coffeehouse.ru [200 OK]: PRESET:russian_shops.xml
  • www.cofix.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.data.rio [200 OK]: MAP:Rio Mosaic 2013 # MAP:Rio Mosaic 2015
  • www.dgterritorio.pt [Error SSL connect attempt failed] :MAP:Carta de Uso do Solo 2010 (WMS) # MAP:Carta de Uso do Solo 2015 (WMS) # MAP:Ortofotos DGRF 2004-2006 (WMS) # MAP:Ortofotos Litoral DGT 2014-2015 (WMS)
  • www.dryclean.ru [200 OK]: PRESET:russian_shops.xml
  • www.dszn.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.e1.co.kr [302 Found]: PRESET:Preset.zip
  • www.famfamfam.com [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :WIKISTYLE:Styles_LitObjects-style.zip
  • www.fosterhjemsforening.no [Error hostname verification failed] :MAP:SSB City Centres overlaySSB Sentrumsoner (lag) # MAP:SSB Urban Areas overlaySSB Tettsteder (lag)
  • www.franscafe.com.br [Error Connection reset by peer] :PRESET:name-suggestions.presets.xml
  • www.ftf.bfkh.gov.hu [Error hostname verification failed] :MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005
  • www.gamtan.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.gangjung.com [200 OK]: PRESET:Preset.zip
  • www.gbarbosa.com.br [200 OK]: PRESET:name-suggestions.presets.xml
  • www.gcova.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.geoimage.at [Error hostname verification failed] :MAP:Geoimage.at MaxRes
  • www.gisnet.lv [Error hostname verification failed] :MAP:USSR - Latvia
  • www.gorzdrav.org [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.gscaltex.com [302 Found]: PRESET:Preset.zip
  • www.istarbucks.co.kr [200 OK]: PRESET:Preset.zip
  • www.jawsfood.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.jukstory.com [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.kfckorea.com [200 OK]: PRESET:Preset.zip
  • www.kolbasa.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.kyochon.com [200 OK]: PRESET:Preset.zip
  • www.limschicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.mcdonalds.co.kr [302 Found]: PRESET:Preset.zip
  • www.mexican.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.monetka.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.mythunder.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.okmarket.ru [200 OK]: PRESET:russian_shops.xml
  • www.oldtimepottery.com [302 Moved Temporarily]: PRESET:name-suggestions.presets.xml
  • www.oliveyoung.co.kr [200 OK]: PRESET:Preset.zip
  • www.openstreetmap.org.pl [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PLUGIN:kendzi3d.jar
  • www.palich.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.persona.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.pfrf.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.popeyes.co.kr [Error SSL connect attempt failed] :PRESET:Preset.zip
  • www.post.gov.tw [302 Found]: PRESET:TaiwanOnly.xml
  • www.raphael-mack.de [Error hostname verification failed] :PLUGIN:globalsat.jar
  • www.s-oil.com [301 Moved Permanently]: PRESET:Preset.zip
  • www.seduh.df.gov.br [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GeoPortal DF 2015 # MAP:GeoPortal DF 2016 # MAP:GeoPortal DF 2017
  • www.sinjeon.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.sjjb.co.uk [Error hostname verification failed] :PRESET:Presets_Sport.xml # WIKIPRESET:Presets_HOT-PDC_InAWARE_Project_Indonesia-preset.zip
  • www.spar.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
  • www.starbucks.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.teremok.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.theskinfood.com [302 Found]: PRESET:Preset.zip
  • www.verno-info.ru [200 OK]: PRESET:russian_shops.xml
  • x5-express.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • zibi.openstreetmap.org.pl [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:s3db-preset.zip

Change History (101)

comment:1 by stoecker, 7 years ago

See #16009 for previous JOSM https ticket.

comment:2 by Don-vip, 7 years ago

Keywords: https added

comment:3 by Klumbumbus, 7 years ago

Description: modified (diff)

(typo fixed)

comment:4 by stoecker, 7 years ago

In 13555/josm:

see #16123 - add HTTPS test script

comment:5 by stoecker, 7 years ago

Description: modified (diff)

I added the test script output. The "200 OK" entries probably can simply be converted to HTTPS. The others in most cases need to be fixed. We should contact at least these cases, which are from OSM community. Not included are all, which don't answer on port 443.

comment:6 by stoecker, 7 years ago

Description: modified (diff)

Fixed Hillshade Hungary

comment:7 by stoecker, 7 years ago

In 13556/josm:

see #16123 - extend HTTPS test script to plugin/style/rule/preset

comment:8 by stoecker, 7 years ago

Description: modified (diff)
Summary: External Imagery httpsExternal Imagery/Styles/Presets/Plugins/Rules https

comment:9 by stoecker, 7 years ago

Description: modified (diff)

Autofixed many JOSM wiki entries.

comment:10 by stoecker, 7 years ago

Description: modified (diff)

Fixed parser script, so it does not include xml namespace in output files.

comment:12 by Klumbumbus, 7 years ago

all http://wiki.openstreetmap.org links in the wiki were fixed to https or osmwiki: on english and german pages. (Other languages left, see the link)

Last edited 7 years ago by Klumbumbus (previous) (diff)

comment:13 by stoecker, 7 years ago

Description: modified (diff)

Fixed wiki.openstreetmap.org and josm.openstreetmap.org for all plugins referenced from SVN, no new releases yet.

comment:14 by marc_marc, 7 years ago

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

in reply to:  14 comment:15 by stoecker, 7 years ago

Description: modified (diff)

Replying to marc_marc:

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

I said that, the "200 OK" entries probably can simply be converted to HTTPS. We always use the preview feature of the wiki to test if the target imagery really works. It is hard to design an full automatics for this (it will be hard enough to design a live checker for existing entries). When changing a Maps entry and clicking on preview you can preview the changed state and thus verify a change before submission of the changed wiki page.

comment:16 by stoecker, 7 years ago

Description: modified (diff)

Update

comment:17 by stoecker, 7 years ago

Description: modified (diff)

Updated plugins

comment:18 by stoecker, 7 years ago

Description: modified (diff)

comment:19 by stoecker, 7 years ago

Description: modified (diff)

comment:20 by stoecker, 7 years ago

Description: modified (diff)

comment:21 by stoecker, 7 years ago

Description: modified (diff)

comment:22 by Klumbumbus, 7 years ago

Description: modified (diff)

comment:23 by stoecker, 7 years ago

Description: modified (diff)

idecan1.grafcan.es Fixed.

comment:24 by stoecker, 7 years ago

Description: modified (diff)

OpenNauticalMap wiki link fixed.

comment:25 by stoecker, 7 years ago

Description: modified (diff)

comment:26 by stoecker, 7 years ago

Description: modified (diff)

comment:27 by stoecker, 7 years ago

Description: modified (diff)

comment:28 by Klumbumbus, 7 years ago

Description: modified (diff)

comment:29 by stoecker, 7 years ago

Description: modified (diff)

Add info about #14241.

comment:30 by Klumbumbus, 7 years ago

Description: modified (diff)

comment:31 by stoecker, 7 years ago

@Vincent: Can you issue a re-release of the already changed Git-based plugins?

comment:32 by stoecker, 7 years ago

Description: modified (diff)

Current state:

removed

Last edited 6 years ago by stoecker (previous) (diff)

comment:33 by stoecker, 7 years ago

In 13585/josm:

see #16123 - add domain ignore list to output

comment:34 by stoecker, 7 years ago

Fixed www.orthos.dhses.ny.gov (dropped www. prefix)

comment:35 by stoecker, 7 years ago

Description: modified (diff)

comment:36 by stoecker, 7 years ago

Milestone: 18.07

Fix gis.lebensministerium.at by changing url to gis.bmlfuw.gv.at which is proper domain for the HTTPS server at that address.

comment:37 by Klumbumbus, 7 years ago

regarding this change https://hikebikemap.org/ is not fully working in https

comment:38 by Klumbumbus, 7 years ago

and this: https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

comment:39 by stoecker, 7 years ago

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

and this: ​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

It didn't do that a few days ago. They only had that Java-only certificate issue at that time as far as I remember. They are counteracting our efforts! :-)

Wait a bit or revert both?

Last edited 7 years ago by stoecker (previous) (diff)

in reply to:  39 ; comment:40 by Klumbumbus, 7 years ago

Replying to stoecker:

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

in reply to:  40 ; comment:41 by stoecker, 7 years ago

Replying to Klumbumbus:

Replying to stoecker:

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

No. It was only that I saw the new entry comming up when running the HTTPS test script ;-)

in reply to:  41 comment:42 by stoecker, 7 years ago

Description: modified (diff)

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Does not work here as well. Reverted.

comment:43 by stoecker, 7 years ago

Description: modified (diff)

Recent state:

removed

Last edited 6 years ago by stoecker (previous) (diff)

comment:44 by stoecker, 7 years ago

Description: modified (diff)

Simple3dBuildingsPreset: fixed links to wiki, josm and w3.org

comment:45 by stoecker, 7 years ago

Fixed www.stadtentwicklung.berlin.de, www.lantmateriet.se and www.lanmateriet.se (Typo)

comment:46 by stoecker, 6 years ago

Description: modified (diff)

Fixed some new entries.

comment:47 by Don-vip, 6 years ago

Milestone: 18.0718.08

comment:48 by Don-vip, 6 years ago

Milestone: 18.0818.09

comment:49 by stoecker, 6 years ago

Description: modified (diff)

Current state, not much progress I fear:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

removed

Last edited 6 years ago by stoecker (previous) (diff)

comment:50 by stoecker, 6 years ago

Description: modified (diff)

comment:51 by stoecker, 6 years ago

Can someone find out what the correct name for HTTPS for ....tile.openstreetmap.us would be?

in reply to:  49 ; comment:54 by Klumbumbus, 6 years ago

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

in reply to:  54 comment:55 by stoecker, 6 years ago

Replying to Klumbumbus:

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

Not for me. Browser setting/plugin?

comment:56 by Klumbumbus, 6 years ago

None that I'm aware of.

comment:57 by Don-vip, 6 years ago

Milestone: 18.0918.10

comment:58 by Don-vip, 6 years ago

Milestone: 18.1018.11

comment:59 by stoecker, 6 years ago

Description: modified (diff)
Milestone: 18.1118.12

Some solved.

comment:60 by stoecker, 6 years ago

In 14443/josm:

see #16123 - some HTTPS issues solved

comment:61 by stoecker, 6 years ago

Description: modified (diff)

comment:62 by stoecker, 6 years ago

In 14444/josm:

see #16123 - not fixed, only network error

comment:63 by Don-vip, 6 years ago

Milestone: 18.1219.01

comment:64 by stoecker, 6 years ago

Description: modified (diff)

Switzerland fixed...

comment:65 by stoecker, 6 years ago

Description: modified (diff)

comment:66 by stoecker, 6 years ago

In 14619/josm:

see #16123 - add logfile output, drop old ignores

comment:67 by stoecker, 6 years ago

In 14620/josm:

see #16123 - don't append logfile output

comment:68 by stoecker, 6 years ago

Many entries fixed: timeline

NOTE: Not only [200 OK], but also [302 Found] and [301 Moved Permanently] indicate working servers.

Last edited 6 years ago by stoecker (previous) (diff)

comment:69 by stoecker, 6 years ago

Remaining:

  • www.data.rio works, but has non-HTTPS links inside
  • osmtools.de: steps preset: contacted author

Current state:

removed

Last edited 6 years ago by stoecker (previous) (diff)

comment:70 by stoecker, 6 years ago

Contacted openstreetmap.hu by mail and asked to support HTTPS.

comment:71 by stoecker, 6 years ago

In 14626/josm:

see #16123 - support complete style/rule/preset scan using josm server cronjob output

comment:72 by stoecker, 6 years ago

Current state with deep-file checks:

removed

Last edited 6 years ago by stoecker (previous) (diff)

comment:74 by stoecker, 6 years ago

FreieTonne: Mail sent

comment:75 by stoecker, 6 years ago

  • tms.freemap.sk: Mail sent
  • www.openstreetmup.hu updated, tiles services not (yet?)

comment:76 by sarxos, 6 years ago

@stoecker,

Pls revert https back to http in Maps/Poland. Users are unable to use Geoportal links with https due to PKIX exception from JOSM because cert used by Geoportal is not supported.

Your changeset:

https://josm.openstreetmap.de/wiki/Maps/Poland?sfp_email=&sfph_mail=&action=diff&version=127&old_version=126&sfp_email=&sfph_mail=

comment:77 by sarxos, 6 years ago

@stoecker,

I did the change on my own. Take care! https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=129

comment:78 by stoecker, 6 years ago

@sarxos:

Please explain why https does not work. What is the error message exactly, what OS do you use, ...?

According to this check the certificates are correct and also valid for Java use and also our integration test showed no issue:
https://www.ssllabs.com/ssltest/analyze.html?d=mapy.geoportal.gov.pl&latest

comment:79 by Don-vip, 6 years ago

"DigiCert Global Root G2" has always been included in Oracle JDK as far as I remember but not in openjdk where it has only be added in 10: http://openjdk.java.net/jeps/319. So we may have some openjdk packages on Linux distributions that don't include it?

in reply to:  79 comment:80 by stoecker, 6 years ago

Replying to Don-vip:

So we may have some openjdk packages on Linux distributions that don't include it?

I thought that on Linux the system certs are used...

comment:81 by sarxos, 6 years ago

I'm on Ubuntu 14.04 with Oracle Java 1.8.0_51-b16 with JOSM installed from https://josm.openstreetmap.de/apt trusty universe.

$ java -version
java version "1.8.0_51"
Java(TM) SE Runtime Environment (build 1.8.0_51-b16)
Java HotSpot(TM) 64-Bit Server VM (build 25.51-b03, mixed mode)
$ apt-cache policy | grep josm
 500 https://josm.openstreetmap.de/apt/ trusty/universe i386 Packages
     origin josm.openstreetmap.de
 500 https://josm.openstreetmap.de/apt/ trusty/universe amd64 Packages
     origin josm.openstreetmap.de

Log from JOSM when accessing Geoportal via SSL:

$ josm 
Using /usr/bin/java to execute josm.
2019-01-08 15:50:36.066 INFO: Log level is at INFO (INFO, 800)
2019-01-08 15:50:37.865 INFO: Invalid plugin description '${plugin.description}' in plugin config
2019-01-08 15:50:38.145 WARNING: Update plugins - org.openstreetmap.josm.plugins.PluginHandler$UpdatePluginsMessagePanel[,0,0,0x0,invalid,layout=java.awt.GridBagLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2019-01-08 15:50:42.565 INFO: GET https://josm.openstreetmap.de/wiki/StartupPage -> 200
2019-01-08 15:50:43.503 INFO: GET https://josm.openstreetmap.de/maps?ids=Bing%2CDigitalGlobe-Premium%2CDigitalGlobe-Standard%2CEsriWorldImagery%2CEsriWorldImageryClarity%2CMapbox%2Cosm-mapnik-black_and_white%2Cstandard -> 200
2019-01-08 15:50:46.233 INFO: loading plugin 'buildings_tools' (version 34807)
2019-01-08 15:50:46.423 WARNING: No configuration settings found.  Using hardcoded default values for all pools.
2019-01-08 15:50:46.776 INFO: Changeset updater active (checks every 60 minutes if open changesets have been closed)
2019-01-08 15:50:50.324 INFO: Defaults for draw.rawgps.layer.wpt.pattern differ: ?{ '{name} ({desc})' | '{name} ({cmt})' | '{name}' | '{desc}' | '{cmt}' } != 
2019-01-08 15:50:50.326 INFO: Defaults for draw.rawgps.layer.audiowpt.pattern differ: ?{ '{name}' | '{desc}' | '{formattedWaypointOffset}' } != 
2019-01-08 15:51:00.247 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> !!!
2019-01-08 15:51:00.249 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.351 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.356 SEVERE: org.openstreetmap.josm.tools.bugreport.ReportedException: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
ReportedException [thread=Thread[AWT-EventQueue-0,6,main], exception=java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, methodWarningFrom=null]
	at org.openstreetmap.josm.tools.bugreport.BugReport.intercept(BugReport.java:173)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:368)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:69)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	... 48 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	... 52 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

comment:82 by sarxos, 6 years ago

When switched to plain http I'm also observing this one in a log. Not sure if it's connected with the SSL issue, but still think it's worth to mention it:

2019-01-08 16:09:57.679 INFO: GET http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetTile&VERSION=1.0.0&LAYER=ORTOFOTOMAPA&STYLE=default&FORMAT=image/jpeg&tileMatrixSet=EPSG:2180&tileMatrix=EPSG:2180:7&tileRow=38&tileCol=50 -> !!!
2019-01-08 16:09:57.680 WARNING: java.net.SocketException: Unexpected end of file from server
java.net.SocketException: Unexpected end of file from server
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:792)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:789)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1535)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
	at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:157)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.loadObject(JCSCachedTileLoaderJob.java:322)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.run(JCSCachedTileLoaderJob.java:231)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)

comment:83 by sarxos, 6 years ago

I tested this on JNLP version of JOSM on my other Ubuntu machine (14.04, but with OpenJDK 1.8.0_171) and accessing it via SSL works well.

2019-01-08 16:24:41.167 INFO: Silent shortcut conflict: 'tools:turnrestriction' moved by 'Improve OSM:Solve issue' to 'Alt+Shift+F2'.
2019-01-08 16:24:41.543 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> 200 (5.09 kB)
2019-01-08 16:24:41.618 INFO: AbstractTileSourceLayer: estimated visible tiles: 20, estimated cache size: 80
$ java -version
openjdk version "1.8.0_171"
OpenJDK Runtime Environment (build 1.8.0_171-8u171-b11-2~14.04-b11)
OpenJDK 64-Bit Server VM (build 25.171-b11, mixed mode)

comment:84 by Don-vip, 6 years ago

8u51? This version of Java is really, really old and no longer supported for years. I'm in favor of restoring https if it works with up to date versions of Java.

comment:85 by sarxos, 6 years ago

Hi @Don-vip,

I can confirm that upgrading Oracle Java 8 to build 191 indeed resolved SSL issue. I will revert Geoportal URLs on Wiki back to https.

$ java -version
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)

comment:86 by sarxos, 6 years ago

@Don-vip, @stoecker,

Wiki changes reverting SSL back: https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=134

Thank you for your support!

comment:87 by Don-vip, 6 years ago

Thanks!

comment:88 by Don-vip, 6 years ago

Milestone: 19.0119.02

comment:89 by Don-vip, 6 years ago

Milestone: 19.0219.03

comment:90 by stoecker, 6 years ago

In 14871/josm:

See #16123 - move TestHTTPS ignores from script to IntegrationTestIgnores page

comment:91 by stoecker, 6 years ago

Not much progress as far as I can see.

News:

  • terinfo.ujbuda.hu → https works, but mapproxy not
  • freietonne → fixed links

Recent state:
copied to ticket text

Last edited 6 years ago by stoecker (previous) (diff)

comment:92 by stoecker, 6 years ago

Description: modified (diff)

comment:94 by stoecker, 6 years ago

Description: modified (diff)

Recent state

comment:96 by stoecker, 6 years ago

In 14919/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port

comment:97 by stoecker, 6 years ago

In 14920/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port - last variant failed with {switch:...} statements

comment:98 by stoecker, 6 years ago

Description: modified (diff)
Milestone: 19.0319.04

comment:99 by stoecker, 6 years ago

Description: modified (diff)

comment:100 by Don-vip, 6 years ago

Milestone: 19.0419.05

comment:101 by stoecker, 6 years ago

Description: modified (diff)
Note: See TracTickets for help on using tickets.