Modify

Opened 12 months ago

Last modified 13 hours ago

#16123 new task

External Imagery/Styles/Presets/Plugins/Rules https

Reported by: stoecker Owned by: team
Priority: normal Milestone: 19.04
Component: External imagery source Version:
Keywords: https Cc: Klumbumbus, Don-vip

Description (last modified by stoecker)

This ticket is for tracking progress of http → https switch for external data. For list of ignores see IntegrationTestIgnores page.

Recent state: (133 answer on port 443 and 90 [not in this list] don't answer on port 443)

  • adam.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017 # MAP:openstreetmap.hu orthophotosopenstreetmap.hu ortofotók
  • beta.hackfoldr.org [200 OK]: PRESET:TaiwanOnly.xml
  • center-obuv.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • coffeehouse.ru [200 OK]: PRESET:russian_shops.xml
  • commons.wikimedia.org [301 Moved Permanently]: PRESET:Presets_Sport.xml
  • cu.bgfretail.com [200 OK]: PRESET:Preset.zip
  • data.virginia.gov [Error hostname verification failed] :MAP:Virginia Building Footprints # MAP:Virginia Imagery Service - Most Recent # MAP:Virginia Property Lines
  • data.vorarlberg.gv.at [Error hostname verification failed] :MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
  • datos.minem.gob.ar [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Ministry of Energy and Mining (WMS)Ministerio de Energía y Minería (WMS)
  • dev.openseamap.org [Error SSL connect attempt failed error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name] :PRESET:INT-1-preset.xml # PRESET:Presets_Hafen.xml # PRESET:Presets_Sport.xml # WIKIPRESET:Presets_Diving-preset.zip
  • double-b.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • dunkindonutsmoscow.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
  • e-odgik.chorzow.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Chorzów: Buildings
  • e.tile.openstreetmap.hu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:EUFAR Balaton orthophotos # MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005 # MAP:Szeged orthophoto 2011Szeged ortofotó 2011
  • egp.gu.gov.si [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GURS: Building outlinesGURS: Tlorisi zgradb # MAP:GURS: DOF050 Ortofoto, DTK5... (WMTS) # MAP:GURS: Road linesGURS: Osi cest
  • elecsnet.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • emapa.katowice.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Katowice: Orthophotomap (aerial image)
  • forum.openstreetmap.org [200 OK]: PRESET:Presets_access_PL-preset.xml
  • fototerkep.hu [Error hostname verification failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017
  • geolittoral.din.developpement-durable.gouv.fr [Error Connection reset by peer] :MAP:Géolittoral - Orthophotos 2000 # MAP:Géolittoral - Sentiers # MAP:Géolittoral V2 - Orthophotos 2011-2014
  • h.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • hochicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • i.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • ide.agroindustria.gob.ar [Error hostname verification failed] :MAP:Ministry of Agroindustry (WMS)Ministerio de Agroindustria (WMS)
  • ilpatio.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • j.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
  • jangmonim.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • josm.openstreetmap.de [200 Ok]: PRESET:Presets_Sport.xml # STYLE:FreieTonne_rules_presets.zip
  • kolesar.turistautak.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :STYLE:cellid.mapcss # STYLE:measurements.mapcss # STYLE:signal-size.mapcss
  • letoile-ru.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • line.me [302 Found]: PRESET:russian_shops.xml
  • maps.stamen.com [Error hostname verification failed] :MAP:Stamen Terrain
  • mil.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • msip-mapa.um.gliwice.pl [Error hostname verification failed] :MAP:Gliwice: Buildings # MAP:Gliwice: Orthophotomap 2013 (aerial image)
  • openclipart.org [200 OK]: PRESET:Presets_Sport.xml
  • opendata.grandnancy.eu [Error hostname verification failed] :MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016
  • openstreetmap.tw [301 Moved Permanently]: PRESET:TaiwanOnly.xml
  • oriflamepro.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • orto.wms.itacyl.es [Error hostname verification failed] :MAP:ITACyL - Castile and León
  • osm.flossk.org [523 Origin Unreachable]: MAP:Kosovo AKK roads # MAP:Kosovo AKK roads with a name that is missing in OSM
  • ovc.catastro.meh.es [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Catastro Spain
  • overpass-turbo.eu [200 OK]: RULE:Rules_Brazilian-Specific.validator.mapcss
  • pensionnij-fond.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • pncg.co.kr [200 OK]: PRESET:Preset.zip
  • przemas75.github.io [404 Not Found]: PRESET:Presets_access_PL-preset.xml
  • raw.githubusercontent.com [301 Moved Permanently]: STYLE:INT1_Seamark.mapcss
  • roskazna.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • roskazna.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • rosstatistika.livejournal.com [200 OK]: PRESET:russian_shops.xml
  • sdobin.ru [200 OK]: PRESET:russian_shops.xml
  • shoko.ru [200 OK]: PRESET:russian_shops.xml
  • siglon.londrina.pr.gov.br [200 OK]: MAP:Londrina Ortofoto 2011
  • smeshnie-ceny.ru [200 OK]: PRESET:russian_shops.xml
  • speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
  • stolichki.ru [200 OK]: PRESET:russian_shops.xml
  • subway.ru [200 OK]: PRESET:russian_shops.xml
  • terinfo.ujbuda.hu [200 OK]: MAP:Budapest district XI orthophoto 2015Budapest XI. kerület ortofotó 2015 # MAP:Budapest district XI orthophoto 2017Budapest XI. kerület ortofotó 2017
  • tiles.itoworld.com [302 Found]: MAP:OS OpenData Locator
  • topgunbarbershop.ru [200 OK]: PRESET:russian_shops.xml
  • trac.openstreetmap.org [200 Ok]: STYLE:mapnik.zip
  • ttobongee.com [Error hostname verification failed] :PRESET:Preset.zip
  • victoria-group.ru [200 OK]: PRESET:russian_shops.xml
  • vkusvill.ru [200 OK]: PRESET:russian_shops.xml
  • vogis.cnv.at [503 Service Unavailable]: MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
  • wiki.openstreetmap.org [301 Moved Permanently]: PLUGIN:Tracer-testing.jar # PLUGIN:contourmerge.jar # PLUGIN:fieldpapers.jar # PLUGIN:mbtiles.jar # PRESET:Presets_Sport.xml # PRESET:TaiwanOnly.xml # PRESET:transformap.xml # PRESET:windrad.xml # STYLE:CEVNI_MapCSS.mapcss # STYLE:electrified.zip
  • wikimapia.org [200 OK]: PRESET:russian_shops.xml
  • wms.openstreetmap.fr [Error hostname verification failed] :MAP:Alpes-Maritimes 2009 # MAP:Alpes-de-Haute-Provence 2010 # MAP:Bayonne - 2016 # MAP:Bordeaux - 2012 # MAP:Bouches-du-Rhône 2009 # MAP:Brest - 2004 # MAP:Drone Imagery (Haiti) # MAP:Drone Imagery 2014 (Haiti) # MAP:Drone Imagery Canaan(Haiti) November 2015 # MAP:Hautes-Alpes 2010 # MAP:Lyon Orthophoto # MAP:Lyon Orthophoto 2015-05 8cm # MAP:Mulhouse - 2018 # MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016 # MAP:Ortho HR # MAP:Ortho HR 2013 # MAP:Ortho HR 2014 # MAP:Ortho HR 2015 # MAP:Ortho HR 2016 # MAP:Ortho HR 2017 # MAP:Rennes - 2014 # MAP:Toulouse - Orthophotoplan 2007 # MAP:Toulouse - Orthophotoplan 2011 # MAP:Toulouse - Orthophotoplan 2013 # MAP:Toulouse - Orthophotoplan 2015 # MAP:Toulouse - Orthophotoplan 2017 # MAP:Tours - Orthophotos 2008-2010 # MAP:Tours - Orthophotos 2013 # MAP:Vaucluse 2010 # MAP:Vercors (Réserve naturelle des Hauts-Plateaux du Vercors) - Orthophoto - 1999 - 1 m
  • wms1.geopoz.poznan.pl [Error No route to host] :MAP:Poznań: Orthophotomap 2014 (aerial image) # MAP:Poznań: Orthophotomap 2016 (aerial image)
  • www.9922.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.ajuker.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.are.zh.ch [Error hostname verification failed] :MAP:Kanton Zürich Orthophoto 2018 10cm # MAP:Kanton Zürich Orthophotos 2014/2015 10cm # MAP:Kanton Zürich Orthophotos 2015/2016 10cm
  • www.ataksupermarket.ru [Error SSL connect attempt failed error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error] :PRESET:russian_shops.xml
  • www.avoska.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
  • www.billa.ru [200 OK]: PRESET:russian_shops.xml
  • www.bonjuk.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.boor.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.burgerking.co.kr [200 OK]: PRESET:Preset.zip
  • www.caffe-pascucci.co.kr [302 Object moved]: PRESET:Preset.zip
  • www.central-ppk.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.cheogajip.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.citypharm.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.coffeebeankorea.com [301 Moved Permanently]: PRESET:Preset.zip
  • www.coffeehouse.ru [200 OK]: PRESET:russian_shops.xml
  • www.cofix.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.data.rio [200 OK]: MAP:Rio Mosaic 2013 # MAP:Rio Mosaic 2015
  • www.dgterritorio.pt [Error SSL connect attempt failed] :MAP:Carta de Uso do Solo 2010 (WMS) # MAP:Carta de Uso do Solo 2015 (WMS) # MAP:Ortofotos DGRF 2004-2006 (WMS) # MAP:Ortofotos Litoral DGT 2014-2015 (WMS)
  • www.dryclean.ru [200 OK]: PRESET:russian_shops.xml
  • www.dszn.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.e1.co.kr [302 Found]: PRESET:Preset.zip
  • www.famfamfam.com [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :WIKISTYLE:Styles_LitObjects-style.zip
  • www.fosterhjemsforening.no [Error hostname verification failed] :MAP:SSB City Centres overlaySSB Sentrumsoner (lag) # MAP:SSB Urban Areas overlaySSB Tettsteder (lag)
  • www.ftf.bfkh.gov.hu [Error hostname verification failed] :MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005
  • www.gamtan.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.gangjung.com [200 OK]: PRESET:Preset.zip
  • www.gcova.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.geoimage.at [Error hostname verification failed] :MAP:Geoimage.at MaxRes
  • www.gisnet.lv [Error hostname verification failed] :MAP:USSR - Latvia
  • www.gorzdrav.org [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.gscaltex.com [200 OK]: PRESET:Preset.zip
  • www.istarbucks.co.kr [200 OK]: PRESET:Preset.zip
  • www.jawsfood.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.jgoodies.com [Error SSL connect attempt failed error:14094458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name] :PLUGIN:plastic_laf.jar
  • www.jukstory.com [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.kfckorea.com [200 OK]: PRESET:Preset.zip
  • www.kolbasa.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.kyochon.com [200 OK]: PRESET:Preset.zip
  • www.limschicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.mcdonalds.co.kr [302 Found]: PRESET:Preset.zip
  • www.mexican.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.mobilelement.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.monetka.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.mythunder.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
  • www.okmarket.ru [200 OK]: PRESET:russian_shops.xml
  • www.oliveyoung.co.kr [200 OK]: PRESET:Preset.zip
  • www.openstreetmap.org.pl [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PLUGIN:kendzi3d.jar
  • www.palich.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • www.persona.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.pfrf.ru [301 Moved Permanently]: PRESET:russian_shops.xml
  • www.popeyes.co.kr [Error SSL connect attempt failed] :PRESET:Preset.zip
  • www.post.gov.tw [302 Found]: PRESET:TaiwanOnly.xml
  • www.raphael-mack.de [Error hostname verification failed] :PLUGIN:globalsat.jar
  • www.s-oil.com [301 Moved Permanently]: PRESET:Preset.zip
  • www.seduh.df.gov.br [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GeoPortal DF 2015 # MAP:GeoPortal DF 2016 # MAP:GeoPortal DF 2017
  • www.sinjeon.co.kr [Error hostname verification failed] :PRESET:Preset.zip
  • www.sjjb.co.uk [Error hostname verification failed] :PRESET:Presets_Sport.xml # WIKIPRESET:Presets_HOT-PDC_InAWARE_Project_Indonesia-preset.zip
  • www.spar.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
  • www.starbucks.ru [Error hostname verification failed] :PRESET:russian_shops.xml
  • www.teremok.ru [200 OK]: PRESET:russian_shops.xml
  • www.theskinfood.com [302 Found]: PRESET:Preset.zip
  • www.verno-info.ru [200 OK]: PRESET:russian_shops.xml
  • x5-express.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
  • zibi.openstreetmap.org.pl [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:s3db-preset.zip

Attachments (0)

Change History (98)

comment:1 Changed 12 months ago by stoecker

See #16009 for previous JOSM https ticket.

comment:2 Changed 12 months ago by Don-vip

Keywords: https added

comment:3 Changed 12 months ago by Klumbumbus

Description: modified (diff)

(typo fixed)

comment:4 Changed 12 months ago by stoecker

In 13555/josm:

see #16123 - add HTTPS test script

comment:5 Changed 12 months ago by stoecker

Description: modified (diff)

I added the test script output. The "200 OK" entries probably can simply be converted to HTTPS. The others in most cases need to be fixed. We should contact at least these cases, which are from OSM community. Not included are all, which don't answer on port 443.

comment:6 Changed 12 months ago by stoecker

Description: modified (diff)

Fixed Hillshade Hungary

comment:7 Changed 12 months ago by stoecker

In 13556/josm:

see #16123 - extend HTTPS test script to plugin/style/rule/preset

comment:8 Changed 12 months ago by stoecker

Description: modified (diff)
Summary: External Imagery httpsExternal Imagery/Styles/Presets/Plugins/Rules https

comment:9 Changed 12 months ago by stoecker

Description: modified (diff)

Autofixed many JOSM wiki entries.

comment:10 Changed 12 months ago by stoecker

Description: modified (diff)

Fixed parser script, so it does not include xml namespace in output files.

comment:12 Changed 12 months ago by Klumbumbus

all http://wiki.openstreetmap.org links in the wiki were fixed to https or osmwiki: on english and german pages. (Other languages left, see the link)

Last edited 12 months ago by Klumbumbus (previous) (diff)

comment:13 Changed 12 months ago by stoecker

Description: modified (diff)

Fixed wiki.openstreetmap.org and josm.openstreetmap.org for all plugins referenced from SVN, no new releases yet.

comment:14 Changed 12 months ago by marc_marc

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

comment:15 in reply to:  14 Changed 12 months ago by stoecker

Description: modified (diff)

Replying to marc_marc:

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

I said that, the "200 OK" entries probably can simply be converted to HTTPS. We always use the preview feature of the wiki to test if the target imagery really works. It is hard to design an full automatics for this (it will be hard enough to design a live checker for existing entries). When changing a Maps entry and clicking on preview you can preview the changed state and thus verify a change before submission of the changed wiki page.

comment:16 Changed 12 months ago by stoecker

Description: modified (diff)

Update

comment:17 Changed 12 months ago by stoecker

Description: modified (diff)

Updated plugins

comment:18 Changed 12 months ago by stoecker

Description: modified (diff)

comment:19 Changed 12 months ago by stoecker

Description: modified (diff)

comment:20 Changed 12 months ago by stoecker

Description: modified (diff)

comment:21 Changed 12 months ago by stoecker

Description: modified (diff)

comment:22 Changed 12 months ago by Klumbumbus

Description: modified (diff)

comment:23 Changed 12 months ago by stoecker

Description: modified (diff)

idecan1.grafcan.es Fixed.

comment:24 Changed 12 months ago by stoecker

Description: modified (diff)

OpenNauticalMap wiki link fixed.

comment:25 Changed 12 months ago by stoecker

Description: modified (diff)

comment:26 Changed 12 months ago by stoecker

Description: modified (diff)

comment:27 Changed 12 months ago by stoecker

Description: modified (diff)

comment:28 Changed 12 months ago by Klumbumbus

Description: modified (diff)

comment:29 Changed 12 months ago by stoecker

Description: modified (diff)

Add info about #14241.

comment:30 Changed 12 months ago by Klumbumbus

Description: modified (diff)

comment:31 Changed 12 months ago by stoecker

@Vincent: Can you issue a re-release of the already changed Git-based plugins?

comment:32 Changed 12 months ago by stoecker

Description: modified (diff)

Current state:

removed

Last edited 7 months ago by stoecker (previous) (diff)

comment:33 Changed 12 months ago by stoecker

In 13585/josm:

see #16123 - add domain ignore list to output

comment:34 Changed 12 months ago by stoecker

Fixed www.orthos.dhses.ny.gov (dropped www. prefix)

comment:35 Changed 12 months ago by stoecker

Description: modified (diff)

comment:36 Changed 12 months ago by stoecker

Milestone: 18.07

Fix gis.lebensministerium.at by changing url to gis.bmlfuw.gv.at which is proper domain for the HTTPS server at that address.

comment:37 Changed 12 months ago by Klumbumbus

regarding this change https://hikebikemap.org/ is not fully working in https

comment:38 Changed 12 months ago by Klumbumbus

and this: https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

comment:39 Changed 12 months ago by stoecker

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

and this: ​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

It didn't do that a few days ago. They only had that Java-only certificate issue at that time as far as I remember. They are counteracting our efforts! :-)

Wait a bit or revert both?

Last edited 12 months ago by stoecker (previous) (diff)

comment:40 in reply to:  39 ; Changed 12 months ago by Klumbumbus

Replying to stoecker:

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

comment:41 in reply to:  40 ; Changed 12 months ago by stoecker

Replying to Klumbumbus:

Replying to stoecker:

regarding this change ​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

No. It was only that I saw the new entry comming up when running the HTTPS test script ;-)

comment:42 in reply to:  41 Changed 12 months ago by stoecker

Description: modified (diff)

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Does not work here as well. Reverted.

comment:43 Changed 11 months ago by stoecker

Description: modified (diff)

Recent state:

removed

Last edited 7 months ago by stoecker (previous) (diff)

comment:44 Changed 11 months ago by stoecker

Description: modified (diff)

Simple3dBuildingsPreset: fixed links to wiki, josm and w3.org

comment:45 Changed 11 months ago by stoecker

Fixed www.stadtentwicklung.berlin.de, www.lantmateriet.se and www.lanmateriet.se (Typo)

comment:46 Changed 9 months ago by stoecker

Description: modified (diff)

Fixed some new entries.

comment:47 Changed 8 months ago by Don-vip

Milestone: 18.0718.08

comment:48 Changed 7 months ago by Don-vip

Milestone: 18.0818.09

comment:49 Changed 7 months ago by stoecker

Description: modified (diff)

Current state, not much progress I fear:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

removed

Last edited 3 months ago by stoecker (previous) (diff)

comment:50 Changed 7 months ago by stoecker

Description: modified (diff)

comment:51 Changed 7 months ago by stoecker

Can someone find out what the correct name for HTTPS for ....tile.openstreetmap.us would be?

comment:52 Changed 7 months ago by stoecker

comment:54 in reply to:  49 ; Changed 7 months ago by Klumbumbus

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

comment:55 in reply to:  54 Changed 7 months ago by stoecker

Replying to Klumbumbus:

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

Not for me. Browser setting/plugin?

comment:56 Changed 7 months ago by Klumbumbus

None that I'm aware of.

comment:57 Changed 6 months ago by Don-vip

Milestone: 18.0918.10

comment:58 Changed 5 months ago by Don-vip

Milestone: 18.1018.11

comment:59 Changed 4 months ago by stoecker

Description: modified (diff)
Milestone: 18.1118.12

Some solved.

comment:60 Changed 4 months ago by stoecker

In 14443/josm:

see #16123 - some HTTPS issues solved

comment:61 Changed 4 months ago by stoecker

Description: modified (diff)

comment:62 Changed 4 months ago by stoecker

In 14444/josm:

see #16123 - not fixed, only network error

comment:63 Changed 3 months ago by Don-vip

Milestone: 18.1219.01

comment:64 Changed 3 months ago by stoecker

Description: modified (diff)

Switzerland fixed...

comment:65 Changed 3 months ago by stoecker

Description: modified (diff)

comment:66 Changed 3 months ago by stoecker

In 14619/josm:

see #16123 - add logfile output, drop old ignores

comment:67 Changed 3 months ago by stoecker

In 14620/josm:

see #16123 - don't append logfile output

comment:68 Changed 3 months ago by stoecker

Many entries fixed: timeline

NOTE: Not only [200 OK], but also [302 Found] and [301 Moved Permanently] indicate working servers.

Last edited 3 months ago by stoecker (previous) (diff)

comment:69 Changed 3 months ago by stoecker

Remaining:

  • www.data.rio works, but has non-HTTPS links inside
  • osmtools.de: steps preset: contacted author

Current state:

removed

Last edited 3 months ago by stoecker (previous) (diff)

comment:70 Changed 3 months ago by stoecker

Contacted openstreetmap.hu by mail and asked to support HTTPS.

comment:71 Changed 3 months ago by stoecker

In 14626/josm:

see #16123 - support complete style/rule/preset scan using josm server cronjob output

comment:72 Changed 3 months ago by stoecker

Current state with deep-file checks:

removed

Last edited 2 weeks ago by stoecker (previous) (diff)

comment:74 Changed 3 months ago by stoecker

FreieTonne: Mail sent

comment:75 Changed 3 months ago by stoecker

  • tms.freemap.sk: Mail sent
  • www.openstreetmup.hu updated, tiles services not (yet?)

comment:76 Changed 3 months ago by sarxos

@stoecker,

Pls revert https back to http in Maps/Poland. Users are unable to use Geoportal links with https due to PKIX exception from JOSM because cert used by Geoportal is not supported.

Your changeset:

https://josm.openstreetmap.de/wiki/Maps/Poland?sfp_email=&sfph_mail=&action=diff&version=127&old_version=126&sfp_email=&sfph_mail=

comment:77 Changed 3 months ago by sarxos

@stoecker,

I did the change on my own. Take care! https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=129

comment:78 Changed 3 months ago by stoecker

@sarxos:

Please explain why https does not work. What is the error message exactly, what OS do you use, ...?

According to this check the certificates are correct and also valid for Java use and also our integration test showed no issue:
https://www.ssllabs.com/ssltest/analyze.html?d=mapy.geoportal.gov.pl&latest

comment:79 Changed 3 months ago by Don-vip

"DigiCert Global Root G2" has always been included in Oracle JDK as far as I remember but not in openjdk where it has only be added in 10: http://openjdk.java.net/jeps/319. So we may have some openjdk packages on Linux distributions that don't include it?

comment:80 in reply to:  79 Changed 2 months ago by stoecker

Replying to Don-vip:

So we may have some openjdk packages on Linux distributions that don't include it?

I thought that on Linux the system certs are used...

comment:81 Changed 2 months ago by sarxos

I'm on Ubuntu 14.04 with Oracle Java 1.8.0_51-b16 with JOSM installed from https://josm.openstreetmap.de/apt trusty universe.

$ java -version
java version "1.8.0_51"
Java(TM) SE Runtime Environment (build 1.8.0_51-b16)
Java HotSpot(TM) 64-Bit Server VM (build 25.51-b03, mixed mode)
$ apt-cache policy | grep josm
 500 https://josm.openstreetmap.de/apt/ trusty/universe i386 Packages
     origin josm.openstreetmap.de
 500 https://josm.openstreetmap.de/apt/ trusty/universe amd64 Packages
     origin josm.openstreetmap.de

Log from JOSM when accessing Geoportal via SSL:

$ josm 
Using /usr/bin/java to execute josm.
2019-01-08 15:50:36.066 INFO: Log level is at INFO (INFO, 800)
2019-01-08 15:50:37.865 INFO: Invalid plugin description '${plugin.description}' in plugin config
2019-01-08 15:50:38.145 WARNING: Update plugins - org.openstreetmap.josm.plugins.PluginHandler$UpdatePluginsMessagePanel[,0,0,0x0,invalid,layout=java.awt.GridBagLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2019-01-08 15:50:42.565 INFO: GET https://josm.openstreetmap.de/wiki/StartupPage -> 200
2019-01-08 15:50:43.503 INFO: GET https://josm.openstreetmap.de/maps?ids=Bing%2CDigitalGlobe-Premium%2CDigitalGlobe-Standard%2CEsriWorldImagery%2CEsriWorldImageryClarity%2CMapbox%2Cosm-mapnik-black_and_white%2Cstandard -> 200
2019-01-08 15:50:46.233 INFO: loading plugin 'buildings_tools' (version 34807)
2019-01-08 15:50:46.423 WARNING: No configuration settings found.  Using hardcoded default values for all pools.
2019-01-08 15:50:46.776 INFO: Changeset updater active (checks every 60 minutes if open changesets have been closed)
2019-01-08 15:50:50.324 INFO: Defaults for draw.rawgps.layer.wpt.pattern differ: ?{ '{name} ({desc})' | '{name} ({cmt})' | '{name}' | '{desc}' | '{cmt}' } != 
2019-01-08 15:50:50.326 INFO: Defaults for draw.rawgps.layer.audiowpt.pattern differ: ?{ '{name}' | '{desc}' | '{formattedWaypointOffset}' } != 
2019-01-08 15:51:00.247 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> !!!
2019-01-08 15:51:00.249 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.351 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.356 SEVERE: org.openstreetmap.josm.tools.bugreport.ReportedException: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
ReportedException [thread=Thread[AWT-EventQueue-0,6,main], exception=java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, methodWarningFrom=null]
	at org.openstreetmap.josm.tools.bugreport.BugReport.intercept(BugReport.java:173)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:368)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:69)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	... 48 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	... 52 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

comment:82 Changed 2 months ago by sarxos

When switched to plain http I'm also observing this one in a log. Not sure if it's connected with the SSL issue, but still think it's worth to mention it:

2019-01-08 16:09:57.679 INFO: GET http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetTile&VERSION=1.0.0&LAYER=ORTOFOTOMAPA&STYLE=default&FORMAT=image/jpeg&tileMatrixSet=EPSG:2180&tileMatrix=EPSG:2180:7&tileRow=38&tileCol=50 -> !!!
2019-01-08 16:09:57.680 WARNING: java.net.SocketException: Unexpected end of file from server
java.net.SocketException: Unexpected end of file from server
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:792)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:789)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1535)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
	at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:157)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.loadObject(JCSCachedTileLoaderJob.java:322)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.run(JCSCachedTileLoaderJob.java:231)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)

comment:83 Changed 2 months ago by sarxos

I tested this on JNLP version of JOSM on my other Ubuntu machine (14.04, but with OpenJDK 1.8.0_171) and accessing it via SSL works well.

2019-01-08 16:24:41.167 INFO: Silent shortcut conflict: 'tools:turnrestriction' moved by 'Improve OSM:Solve issue' to 'Alt+Shift+F2'.
2019-01-08 16:24:41.543 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> 200 (5.09 kB)
2019-01-08 16:24:41.618 INFO: AbstractTileSourceLayer: estimated visible tiles: 20, estimated cache size: 80
$ java -version
openjdk version "1.8.0_171"
OpenJDK Runtime Environment (build 1.8.0_171-8u171-b11-2~14.04-b11)
OpenJDK 64-Bit Server VM (build 25.171-b11, mixed mode)

comment:84 Changed 2 months ago by Don-vip

8u51? This version of Java is really, really old and no longer supported for years. I'm in favor of restoring https if it works with up to date versions of Java.

comment:85 Changed 2 months ago by sarxos

Hi @Don-vip,

I can confirm that upgrading Oracle Java 8 to build 191 indeed resolved SSL issue. I will revert Geoportal URLs on Wiki back to https.

$ java -version
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)

comment:86 Changed 2 months ago by sarxos

@Don-vip, @stoecker,

Wiki changes reverting SSL back: https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=134

Thank you for your support!

comment:87 Changed 2 months ago by Don-vip

Thanks!

comment:88 Changed 8 weeks ago by Don-vip

Milestone: 19.0119.02

comment:89 Changed 4 weeks ago by Don-vip

Milestone: 19.0219.03

comment:90 Changed 2 weeks ago by stoecker

In 14871/josm:

See #16123 - move TestHTTPS ignores from script to IntegrationTestIgnores page

comment:91 Changed 2 weeks ago by stoecker

Not much progress as far as I can see.

News:

  • terinfo.ujbuda.hu → https works, but mapproxy not
  • freietonne → fixed links

Recent state:
copied to ticket text

Last edited 2 weeks ago by stoecker (previous) (diff)

comment:92 Changed 2 weeks ago by stoecker

Description: modified (diff)

comment:94 Changed 5 days ago by stoecker

Description: modified (diff)

Recent state

comment:96 Changed 13 hours ago by stoecker

In 14919/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port

comment:97 Changed 13 hours ago by stoecker

In 14920/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port - last variant failed with {switch:...} statements

comment:98 Changed 13 hours ago by stoecker

Description: modified (diff)
Milestone: 19.0319.04

Modify Ticket

Change Properties
Set your email in Preferences
Action
as new The owner will remain team.
as The resolution will be set.
to The owner will be changed from team to the specified user.
The owner will change to stoecker
as duplicate The resolution will be set to duplicate.The specified ticket will be cross-referenced with this ticket
The owner will be changed from team to anonymous.

Add Comment


E-mail address and name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.