External Imagery/Styles/Presets/Plugins/Rules https

[stoecker]

This ticket is for tracking progress of http → https switch for external data

The following list contains https capable servers and the status of them. Not all are properly setup

• ge.ch: Works for imagery, but Attribution URL requests username
• gis.mapa.lodz.pl [SSL Error - wrong hostname] Łódź: Buildings, Orthophotomap 2015
• osmdata.asitvd.ch: HTTPS works, but does not deliver tiles
• siglon.londrina.pr.gov.br [Java SNI error] : #14241, email sent, no answer
• tiles.itoworld.com: HTTPS redirects to HTTP
• tms.cadastre.openstreetmap.fr: HTTPS works, but does not deliver tiles
• wms.openstreetmap.de [SSL Error - wrong hostname]: E-Mail sent to FOSSGIS admin list, no reaction
• www.jgoodies.com [Error SSL: unrecognized name] :PLUGIN:plastic_laf.jar, email reply: proper HTTPS unnecessary
• www.osm-tools.org: Wrong CertName, Author contacted, will be changed in near future
• zibi.openstreetmap.org.pl [Error SSL: certificate verify failed] : ​ticket

[stoecker]

See #16009 for previous JOSM https ticket.

[Klumbumbus]

(typo fixed)

[stoecker]

In 13555/josm:

see #16123 - add HTTPS test script

[stoecker]

I added the test script output. The "200 OK" entries probably can simply be converted to HTTPS. The others in most cases need to be fixed. We should contact at least these cases, which are from OSM community. Not included are all, which don't answer on port 443.

[stoecker]

Fixed Hillshade Hungary

[stoecker]

In 13556/josm:

see #16123 - extend HTTPS test script to plugin/style/rule/preset

[stoecker]

Autofixed many JOSM wiki entries.

[stoecker]

Fixed parser script, so it does not include xml namespace in output files.

[stoecker]

​https://lists.openstreetmap.org/pipermail/josm-dev/2018-March/008012.html

[Klumbumbus]

all http://wiki.openstreetmap.org links in the wiki were fixed to https or osmwiki: on english and german pages. (Other languages left, see the link)

[stoecker]

Fixed wiki.openstreetmap.org and josm.openstreetmap.org for all plugins referenced from SVN, no new releases yet.

[marc_marc]

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but ​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

[stoecker]

Replying to marc_marc:

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but ​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

I said that, the "200 OK" entries probably can simply be converted to HTTPS. We always use the preview feature of the wiki to test if the target imagery really works. It is hard to design an full automatics for this (it will be hard enough to design a live checker for existing entries). When changing a Maps entry and clicking on preview you can preview the changed state and thus verify a change before submission of the changed wiki page.

[stoecker]

Update

[stoecker]

Updated plugins

[stoecker]

idecan1.grafcan.es Fixed.

[stoecker]

OpenNauticalMap wiki link fixed.

[stoecker]

Add info about #14241.

[stoecker]

@Vincent: Can you issue a re-release of the already changed Git-based plugins?

[stoecker]

Current state:

removed

[stoecker]

In 13585/josm:

see #16123 - add domain ignore list to output

[stoecker]

Fixed www.orthos.dhses.ny.gov (dropped www. prefix)

[stoecker]

Fix gis.lebensministerium.at by changing url to gis.bmlfuw.gv.at which is proper domain for the HTTPS server at that address.

[Klumbumbus]

regarding this change ​https://hikebikemap.org/ is not fully working in https

[Klumbumbus]

and this: ​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

[stoecker]

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

and this: ​​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

It didn't do that a few days ago. They only had that Java-only certificate issue at that time as far as I remember. They are counteracting our efforts! :-)

Wait a bit or revert both?

[Klumbumbus]

Replying to stoecker:

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

[stoecker]

Replying to Klumbumbus:

Replying to stoecker:

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

No. It was only that I saw the new entry comming up when running the HTTPS test script ;-)

[stoecker]

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Does not work here as well. Reverted.

[stoecker]

Recent state:

removed

[stoecker]

Simple3dBuildingsPreset: fixed links to wiki, josm and w3.org

[stoecker]

Fixed www.stadtentwicklung.berlin.de, www.lantmateriet.se and www.lanmateriet.se (Typo)

[stoecker]

Fixed some new entries.

[stoecker]

Current state, not much progress I fear:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

removed

[stoecker]

Can someone find out what the correct name for HTTPS for ....tile.openstreetmap.us would be?

[stoecker]

www.openstreetmap.org.pl: ​https://github.com/kendzi/kendzi3d/issues/88

[stoecker]

Maybe that will help? ​https://www.blog.google/products/chrome/milestone-chrome-security-marking-http-not-secure/

[Klumbumbus]

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

[stoecker]

Replying to Klumbumbus:

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

Not for me. Browser setting/plugin?

[Klumbumbus]

None that I'm aware of.

[stoecker]

Some solved.

[stoecker]

In 14443/josm:

see #16123 - some HTTPS issues solved