External Imagery/Styles/Presets/Plugins/Rules https

[stoecker]

This ticket is for tracking progress of http → https switch for external data. For list of ignores see IntegrationTestIgnores page.

Recent state: (102 answer on port 443 and 79 [not in this list] don't answer on port 443)

• adam.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017 # MAP:openstreetmap.hu orthophotosopenstreetmap.hu ortofotók
• beta.hackfoldr.org [200 OK]: PRESET:TaiwanOnly.xml
• center-obuv.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• cu.bgfretail.com [200 OK]: PRESET:Preset.zip
• data.virginia.gov [Error hostname verification failed] :MAP:Virginia Building Footprints # MAP:Virginia Imagery Service - Most Recent # MAP:Virginia Property Lines
• data.vorarlberg.gv.at [Error hostname verification failed] :MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
• datos.minem.gob.ar [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Ministry of Energy and Mining (WMS)Ministerio de Energía y Minería (WMS)
• dunkindonutsmoscow.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
• e-odgik.chorzow.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Chorzów: Buildings
• e.tile.openstreetmap.hu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:EUFAR Balaton orthophotos # MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005 # MAP:Szeged orthophoto 2011Szeged ortofotó 2011
• egp.gu.gov.si [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GURS: Building outlinesGURS: Tlorisi zgradb # MAP:GURS: DOF050 Ortofoto, DTK5... (WMTS) # MAP:GURS: Road linesGURS: Osi cest
• emapa.katowice.eu [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Katowice: Orthophotomap (aerial image)
• forum.openstreetmap.org [200 OK]: PRESET:Presets_access_PL-preset.xml
• fototerkep.hu [Error hostname verification failed] :MAP:Danube flood orthophoto 2013Dunai árvízi ortofotó 2013 # MAP:Sóskút, Pusztazámor, Tárnok, Diósd orthophoto 2017Sóskút, Pusztazámor, Tárnok, Diósd ortofotó 2017
• geolittoral.din.developpement-durable.gouv.fr [Error Connection reset by peer] :MAP:Géolittoral - Orthophotos 2000 # MAP:Géolittoral - Sentiers # MAP:Géolittoral V2 - Orthophotos 2011-2014
• glowsubs.ru [Error hostname verification failed] :PRESET:russian_shops.xml
• h.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
• hochicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• i.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
• ilpatio.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• j.tile.openstreetmap.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :MAP:OpenStreetMap Hungary (hiking routes)OpenStreetMap (turistautak)
• jangmonim.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• josm.openstreetmap.de [200 Ok]: STYLE:FreieTonne_rules_presets.zip
• kolesar.turistautak.hu [Error SSL connect attempt failed error:1408F10B:SSL routines:ssl3_get_record:wrong version number] :STYLE:cellid.mapcss # STYLE:measurements.mapcss # STYLE:signal-size.mapcss
• line.me [302 Found]: PRESET:russian_shops.xml
• maps.stamen.com [Error hostname verification failed] :MAP:Stamen Terrain
• mil.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• msip-mapa.um.gliwice.pl [Error hostname verification failed] :MAP:Gliwice: Buildings # MAP:Gliwice: Orthophotomap 2013 (aerial image)
• opendata.grandnancy.eu [Error hostname verification failed] :MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016
• openstreetmap.tw [301 Moved Permanently]: PRESET:TaiwanOnly.xml
• oriflamepro.ru [Error hostname verification failed] :PRESET:russian_shops.xml
• orto.wms.itacyl.es [Error hostname verification failed] :MAP:ITACyL - Castile and León
• osm.flossk.org [521 Origin Down]: MAP:Kosovo AKK roads # MAP:Kosovo AKK roads with a name that is missing in OSM
• ovc.catastro.meh.es [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:Catastro Spain
• overpass-turbo.eu [200 OK]: RULE:Rules_Brazilian-Specific.validator.mapcss
• parking.mos.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• pncg.co.kr [200 OK]: PRESET:Preset.zip
• przemas75.github.io [404 Not Found]: PRESET:Presets_access_PL-preset.xml
• raw.githubusercontent.com [301 Moved Permanently]: STYLE:INT1_Seamark.mapcss
• roskazna.ru [200 OK]: PRESET:russian_shops.xml
• siglon.londrina.pr.gov.br [200 OK]: MAP:Londrina Ortofoto 2011
• speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
• trac.openstreetmap.org [200 Ok]: STYLE:mapnik.zip
• ttobongee.com [Error hostname verification failed] :PRESET:Preset.zip
• vkusvill.ru [200 OK]: PRESET:russian_shops.xml
• vogis.cnv.at [503 Service Unavailable]: MAP:VoGIS: Echtfarbenbild 2018 (10cm) # MAP:VoGIS: Flächenwidmungsplan # MAP:VoGIS: Höhen und Gelände # MAP:VoGIS: Luftbilder
• wiki.openstreetmap.org [301 Moved Permanently]: PLUGIN:Tracer-testing.jar # PLUGIN:contourmerge.jar # PLUGIN:fieldpapers.jar # PLUGIN:mbtiles.jar # PRESET:TaiwanOnly.xml # PRESET:cai.xml # PRESET:transformap.xml # PRESET:windrad.xml # STYLE:CEVNI_MapCSS.mapcss # STYLE:electrified.zip # WIKIPRESET:Presets_Baseroadscheckprojects-preset.zip
• wms.openstreetmap.fr [Error hostname verification failed] :MAP:Alpes-Maritimes 2009 # MAP:Alpes-de-Haute-Provence 2010 # MAP:Bayonne - 2016 # MAP:Bordeaux - 2012 # MAP:Bouches-du-Rhône 2009 # MAP:Brest - 2004 # MAP:Drone Imagery (Haiti) # MAP:Drone Imagery 2014 (Haiti) # MAP:Drone Imagery Canaan(Haiti) November 2015 # MAP:Hautes-Alpes 2010 # MAP:Lyon Orthophoto 2015-05 8cm # MAP:Lyon Orthophoto 8cm # MAP:Mulhouse - 2018 # MAP:Nancy - Orthophoto # MAP:Nancy - Orthophoto - 1994 # MAP:Nancy - Orthophoto - 1999 # MAP:Nancy - Orthophoto - 2001 # MAP:Nancy - Orthophoto - 2002 # MAP:Nancy - Orthophoto - 2005 # MAP:Nancy - Orthophoto - 2008 # MAP:Nancy - Orthophoto - 2012 # MAP:Nancy - Orthophoto - 2016 # MAP:Ortho HR # MAP:Ortho HR 2013 # MAP:Ortho HR 2014 # MAP:Ortho HR 2015 # MAP:Ortho HR 2016 # MAP:Ortho HR 2017 # MAP:Rennes - 2014 # MAP:Toulouse - Orthophotoplan 2007 # MAP:Toulouse - Orthophotoplan 2011 # MAP:Toulouse - Orthophotoplan 2013 # MAP:Toulouse - Orthophotoplan 2015 # MAP:Toulouse - Orthophotoplan 2017 # MAP:Tours - Orthophotos 2008-2010 # MAP:Tours - Orthophotos 2013 # MAP:Vaucluse 2010 # MAP:Vercors (Réserve naturelle des Hauts-Plateaux du Vercors) - Orthophoto - 1999 - 1 m
• wms1.geopoz.poznan.pl [Error No route to host] :MAP:Poznań: Orthophotomap 2014 (aerial image) # MAP:Poznań: Orthophotomap 2016 (aerial image)
• www.9922.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.ajuker.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.are.zh.ch [Error hostname verification failed] :MAP:Kanton Zürich Orthophoto 2018 10cm # MAP:Kanton Zürich Orthophotos 2014/2015 10cm # MAP:Kanton Zürich Orthophotos 2015/2016 10cm
• www.ataksupermarket.ru [Error SSL connect attempt failed error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error] :PRESET:russian_shops.xml
• www.avoska.ru [Error SSL connect attempt failed error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure] :PRESET:russian_shops.xml
• www.bonjuk.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.boor.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.burgerking.co.kr [200 OK]: PRESET:Preset.zip
• www.caffe-pascucci.co.kr [302 Object moved]: PRESET:Preset.zip
• www.central-ppk.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• www.cheogajip.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.coffeebeankorea.com [301 Moved Permanently]: PRESET:Preset.zip
• www.cofix.ru [200 OK]: PRESET:russian_shops.xml
• www.data.rio [200 OK]: MAP:Rio Mosaic 2013 # MAP:Rio Mosaic 2015
• www.dgterritorio.pt [Error SSL connect attempt failed] :MAP:Carta de Uso do Solo 2010 (WMS) # MAP:Carta de Uso do Solo 2015 (WMS) # MAP:Ortofotos DGRF 2004-2006 (WMS) # MAP:Ortofotos Litoral DGT 2014-2015 (WMS)
• www.dszn.ru [Error hostname verification failed] :PRESET:russian_shops.xml
• www.e1.co.kr [302 Found]: PRESET:Preset.zip
• www.fosterhjemsforening.no [Error hostname verification failed] :MAP:SSB City Centres overlaySSB Sentrumsoner (lag) # MAP:SSB Urban Areas overlaySSB Tettsteder (lag)
• www.franscafe.com.br [Error Connection reset by peer] :PRESET:name-suggestions.presets.xml
• www.ftf.bfkh.gov.hu [Error hostname verification failed] :MAP:FÖMI orthophoto 2000FÖMI ortofotó 2000 # MAP:FÖMI orthophoto 2005FÖMI ortofotó 2005
• www.gamtan.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.gangjung.com [200 OK]: PRESET:Preset.zip
• www.gcova.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.geoimage.at [Error hostname verification failed] :MAP:Geoimage.at MaxRes
• www.gisnet.lv [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:USSR - Latvia
• www.gscaltex.com [200 OK]: PRESET:Preset.zip
• www.istarbucks.co.kr [200 OK]: PRESET:Preset.zip
• www.jawsfood.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.jukstory.com [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.kfckorea.com [200 OK]: PRESET:Preset.zip
• www.kolbasa.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• www.kyochon.com [200 OK]: PRESET:Preset.zip
• www.limschicken.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.mcdonalds.co.kr [302 Found]: PRESET:Preset.zip
• www.mexican.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.mythunder.co.kr [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:Preset.zip
• www.oldtimepottery.com [302 Moved Temporarily]: PRESET:name-suggestions.presets.xml
• www.oliveyoung.co.kr [200 OK]: PRESET:Preset.zip
• www.openstreetmap.org.pl [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PLUGIN:kendzi3d.jar
• www.palich.ru [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :PRESET:russian_shops.xml
• www.popeyes.co.kr [Error SSL connect attempt failed] :PRESET:Preset.zip
• www.post.gov.tw [302 Found]: PRESET:TaiwanOnly.xml
• www.raphael-mack.de [Error hostname verification failed] :PLUGIN:globalsat.jar
• www.s-oil.com [301 Moved Permanently]: PRESET:Preset.zip
• www.seduh.df.gov.br [Error SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed] :MAP:GeoPortal DF 2015 # MAP:GeoPortal DF 2016 # MAP:GeoPortal DF 2017
• www.sinjeon.co.kr [Error hostname verification failed] :PRESET:Preset.zip
• www.sjjb.co.uk [Error hostname verification failed] :WIKIPRESET:Presets_HOT-PDC_InAWARE_Project_Indonesia-preset.zip
• www.spar.ru [Error hostname verification failed] :PRESET:russian_shops.xml
• www.speed-control.by [Error hostname verification failed] :WIKIPRESET:Presets_speed_camera_in_Belarus-preset.zip
• www.starbucks.ru [Error hostname verification failed] :PRESET:russian_shops.xml
• www.theskinfood.com [302 Found]: PRESET:Preset.zip
• www.yoshinoya.com.au [Error Der Name oder der Dienst ist nicht bekannt] :WIKIPRESET:Presets_Japan-preset.zip
• x5-express.ru [Error No route to host] :PRESET:russian_shops.xml

[stoecker]

See #16009 for previous JOSM https ticket.

[Klumbumbus]

(typo fixed)

[stoecker]

In 13555/josm:

see #16123 - add HTTPS test script

[stoecker]

I added the test script output. The "200 OK" entries probably can simply be converted to HTTPS. The others in most cases need to be fixed. We should contact at least these cases, which are from OSM community. Not included are all, which don't answer on port 443.

[stoecker]

Fixed Hillshade Hungary

[stoecker]

In 13556/josm:

see #16123 - extend HTTPS test script to plugin/style/rule/preset

[stoecker]

Autofixed many JOSM wiki entries.

[stoecker]

Fixed parser script, so it does not include xml namespace in output files.

[stoecker]

​https://lists.openstreetmap.org/pipermail/josm-dev/2018-March/008012.html

[Klumbumbus]

all http://wiki.openstreetmap.org links in the wiki were fixed to https or osmwiki: on english and german pages. (Other languages left, see the link)

[stoecker]

Fixed wiki.openstreetmap.org and josm.openstreetmap.org for all plugins referenced from SVN, no new releases yet.

[marc_marc]

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but ​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

[stoecker]

Replying to marc_marc:

the test need to be extended.
for exemple tms.cadastre.openstreetmap.fr listed with a status 200
​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png is ok
but ​https://tms.cadastre.openstreetmap.fr/*/tout/22/2124425/1442952.png give a 404
maybe it's needed to test that a reply is ok for a tile or for the real url to avoir url with https support but with no (or not the same) content in https

I said that, the "200 OK" entries probably can simply be converted to HTTPS. We always use the preview feature of the wiki to test if the target imagery really works. It is hard to design an full automatics for this (it will be hard enough to design a live checker for existing entries). When changing a Maps entry and clicking on preview you can preview the changed state and thus verify a change before submission of the changed wiki page.

[stoecker]

Update

[stoecker]

Updated plugins

[stoecker]

idecan1.grafcan.es Fixed.

[stoecker]

OpenNauticalMap wiki link fixed.

[stoecker]

Add info about #14241.

[stoecker]

@Vincent: Can you issue a re-release of the already changed Git-based plugins?

[stoecker]

Current state:

removed

[stoecker]

In 13585/josm:

see #16123 - add domain ignore list to output

[stoecker]

Fixed www.orthos.dhses.ny.gov (dropped www. prefix)

[stoecker]

Fix gis.lebensministerium.at by changing url to gis.bmlfuw.gv.at which is proper domain for the HTTPS server at that address.

[Klumbumbus]

regarding this change ​https://hikebikemap.org/ is not fully working in https

[Klumbumbus]

and this: ​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

[stoecker]

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

and this: ​​https://siglon.londrina.pr.gov.br/ redirects to a http site. Does the link in https make sense in this case?

It didn't do that a few days ago. They only had that Java-only certificate issue at that time as far as I remember. They are counteracting our efforts! :-)

Wait a bit or revert both?

[Klumbumbus]

Replying to stoecker:

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

[stoecker]

Replying to Klumbumbus:

Replying to stoecker:

regarding this change ​​https://hikebikemap.org/ is not fully working in https

Hmm. Worked in my older firefox. Seems the newer ones are stricter with mixed content or they are still playing with it? At least the icon works fine ;-)

It doesn't work for me with FF, FF ESR, Opera and IE. So I think it is rather a problem of the website itself.

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Wait a bit or revert both?

I don't know. I wanted to clean up ImageryCompare, but these two made problems. Did you have contact with the guys from hike and bike map (because of your comment "extremely new https from today")?

No. It was only that I saw the new entry comming up when running the HTTPS test script ;-)

[stoecker]

I can test tomorrow with my old Firefox. Yes, its a website issue, but probably together with browser security settings which got stricter with each release.

Does not work here as well. Reverted.

[stoecker]

Recent state:

removed

[stoecker]

Simple3dBuildingsPreset: fixed links to wiki, josm and w3.org

[stoecker]

Fixed www.stadtentwicklung.berlin.de, www.lantmateriet.se and www.lanmateriet.se (Typo)

[stoecker]

Fixed some new entries.

[stoecker]

Current state, not much progress I fear:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

removed

[stoecker]

Can someone find out what the correct name for HTTPS for ....tile.openstreetmap.us would be?

[stoecker]

www.openstreetmap.org.pl: ​https://github.com/kendzi/kendzi3d/issues/88

[stoecker]

Maybe that will help? ​https://www.blog.google/products/chrome/milestone-chrome-security-marking-http-not-secure/

[Klumbumbus]

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

[stoecker]

Replying to Klumbumbus:

Replying to stoecker:

@Klumbumbus: You added https to hikebikemap, but the issue still remains - HTTPS version does not work. I'll try to contact Colin.

Hm, I changed it as the page now automatically redirects to https.

Not for me. Browser setting/plugin?

[Klumbumbus]

None that I'm aware of.

[stoecker]

Some solved.

[stoecker]

In 14443/josm:

see #16123 - some HTTPS issues solved

[stoecker]

In 14444/josm:

see #16123 - not fixed, only network error

[stoecker]

Switzerland fixed...

[stoecker]

In 14619/josm:

see #16123 - add logfile output, drop old ignores

[stoecker]

In 14620/josm:

see #16123 - don't append logfile output

[stoecker]

Many entries fixed: timeline

NOTE: Not only [200 OK], but also [302 Found] and [301 Moved Permanently] indicate working servers.

[stoecker]

Remaining:

• www.data.rio works, but has non-HTTPS links inside
• osmtools.de: steps preset: contacted author

Current state:

removed

[stoecker]

Contacted openstreetmap.hu by mail and asked to support HTTPS.

[stoecker]

In 14626/josm:

see #16123 - support complete style/rule/preset scan using josm server cronjob output

[stoecker]

Current state with deep-file checks:

removed

[stoecker]

New Tickets:

• ​https://github.com/yopaseopor/traffic_signs_preset_JOSM/issues/22
• ​https://github.com/ruosm-presets/literan-moscow/issues/91

[stoecker]

FreieTonne: Mail sent

[stoecker]

• tms.freemap.sk: Mail sent
• www.openstreetmup.hu updated, tiles services not (yet?)

[sarxos]

@stoecker,

Pls revert https back to http in Maps/Poland. Users are unable to use Geoportal links with https due to PKIX exception from JOSM because cert used by Geoportal is not supported.

Your changeset:

https://josm.openstreetmap.de/wiki/Maps/Poland?sfp_email=&sfph_mail=&action=diff&version=127&old_version=126&sfp_email=&sfph_mail=

[sarxos]

@stoecker,

I did the change on my own. Take care! https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=129

[stoecker]

@sarxos:

Please explain why https does not work. What is the error message exactly, what OS do you use, ...?

According to this check the certificates are correct and also valid for Java use and also our integration test showed no issue:
​https://www.ssllabs.com/ssltest/analyze.html?d=mapy.geoportal.gov.pl&latest

[Don-vip]

"DigiCert Global Root G2" has always been included in Oracle JDK as far as I remember but not in openjdk where it has only be added in 10: ​http://openjdk.java.net/jeps/319. So we may have some openjdk packages on Linux distributions that don't include it?

[stoecker]

Replying to Don-vip:

So we may have some openjdk packages on Linux distributions that don't include it?

I thought that on Linux the system certs are used...

[sarxos]

I'm on Ubuntu 14.04 with Oracle Java 1.8.0_51-b16 with JOSM installed from https://josm.openstreetmap.de/apt trusty universe.

$ java -version
java version "1.8.0_51"
Java(TM) SE Runtime Environment (build 1.8.0_51-b16)
Java HotSpot(TM) 64-Bit Server VM (build 25.51-b03, mixed mode)

$ apt-cache policy | grep josm
 500 https://josm.openstreetmap.de/apt/ trusty/universe i386 Packages
     origin josm.openstreetmap.de
 500 https://josm.openstreetmap.de/apt/ trusty/universe amd64 Packages
     origin josm.openstreetmap.de

Log from JOSM when accessing Geoportal via SSL:

$ josm 
Using /usr/bin/java to execute josm.
2019-01-08 15:50:36.066 INFO: Log level is at INFO (INFO, 800)
2019-01-08 15:50:37.865 INFO: Invalid plugin description '${plugin.description}' in plugin config
2019-01-08 15:50:38.145 WARNING: Update plugins - org.openstreetmap.josm.plugins.PluginHandler$UpdatePluginsMessagePanel[,0,0,0x0,invalid,layout=java.awt.GridBagLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=9,maximumSize=,minimumSize=,preferredSize=]
2019-01-08 15:50:42.565 INFO: GET https://josm.openstreetmap.de/wiki/StartupPage -> 200
2019-01-08 15:50:43.503 INFO: GET https://josm.openstreetmap.de/maps?ids=Bing%2CDigitalGlobe-Premium%2CDigitalGlobe-Standard%2CEsriWorldImagery%2CEsriWorldImageryClarity%2CMapbox%2Cosm-mapnik-black_and_white%2Cstandard -> 200
2019-01-08 15:50:46.233 INFO: loading plugin 'buildings_tools' (version 34807)
2019-01-08 15:50:46.423 WARNING: No configuration settings found.  Using hardcoded default values for all pools.
2019-01-08 15:50:46.776 INFO: Changeset updater active (checks every 60 minutes if open changesets have been closed)
2019-01-08 15:50:50.324 INFO: Defaults for draw.rawgps.layer.wpt.pattern differ: ?{ '{name} ({desc})' | '{name} ({cmt})' | '{name}' | '{desc}' | '{cmt}' } != 
2019-01-08 15:50:50.326 INFO: Defaults for draw.rawgps.layer.audiowpt.pattern differ: ?{ '{name}' | '{desc}' | '{formattedWaypointOffset}' } != 
2019-01-08 15:51:00.247 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> !!!
2019-01-08 15:51:00.249 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.351 WARNING: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

2019-01-08 15:51:00.356 SEVERE: org.openstreetmap.josm.tools.bugreport.ReportedException: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Cause: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
ReportedException [thread=Thread[AWT-EventQueue-0,6,main], exception=java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, methodWarningFrom=null]
	at org.openstreetmap.josm.tools.bugreport.BugReport.intercept(BugReport.java:173)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:368)
	at org.openstreetmap.josm.gui.layer.LayerManager.fireLayerAdded(LayerManager.java:459)
	at org.openstreetmap.josm.gui.layer.LayerManager.realAddLayer(LayerManager.java:234)
	at org.openstreetmap.josm.gui.layer.MainLayerManager.realAddLayer(MainLayerManager.java:282)
	at org.openstreetmap.josm.gui.layer.LayerManager.lambda$addLayer$0(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager$$Lambda$343/1386466327.run(Unknown Source)
	at org.openstreetmap.josm.gui.util.GuiHelper.runInEDTAndWaitWithException(GuiHelper.java:238)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:218)
	at org.openstreetmap.josm.gui.layer.LayerManager.addLayer(LayerManager.java:207)
	at org.openstreetmap.josm.actions.AddImageryLayerAction.actionPerformed(AddImageryLayerAction.java:151)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
	at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2346)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:376)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:833)
	at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(BasicMenuItemUI.java:877)
	at java.awt.AWTEventMulticaster.mouseReleased(AWTEventMulticaster.java:289)
	at java.awt.Component.processMouseEvent(Component.java:6525)
	at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
	at java.awt.Component.processEvent(Component.java:6290)
	at java.awt.Container.processEvent(Container.java:2234)
	at java.awt.Component.dispatchEventImpl(Component.java:4881)
	at java.awt.Container.dispatchEventImpl(Container.java:2292)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4898)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4533)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4462)
	at java.awt.Container.dispatchEventImpl(Container.java:2278)
	at java.awt.Window.dispatchEventImpl(Window.java:2750)
	at java.awt.Component.dispatchEvent(Component.java:4703)
	at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
	at java.awt.EventQueue.access$500(EventQueue.java:97)
	at java.awt.EventQueue$3.run(EventQueue.java:709)
	at java.awt.EventQueue$3.run(EventQueue.java:703)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.awt.EventQueue$4.run(EventQueue.java:731)
	at java.awt.EventQueue$4.run(EventQueue.java:729)
	at java.security.AccessController.doPrivileged(Native Method)
	at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:75)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
	at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: java.lang.IllegalArgumentException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:69)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:32)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.initializeIfRequired(AbstractTileSourceLayer.java:570)
	at org.openstreetmap.josm.gui.layer.AbstractTileSourceLayer.attachToMapView(AbstractTileSourceLayer.java:552)
	at org.openstreetmap.josm.gui.MapView.layerAdded(MapView.java:346)
	... 48 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1497)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:153)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.io.CachedFile.checkLocal(CachedFile.java:501)
	at org.openstreetmap.josm.io.CachedFile.getFile(CachedFile.java:282)
	at org.openstreetmap.josm.io.CachedFile.getInputStream(CachedFile.java:224)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.getCapabilities(WMTSTileSource.java:414)
	at org.openstreetmap.josm.data.imagery.WMTSTileSource.<init>(WMTSTileSource.java:328)
	at org.openstreetmap.josm.gui.layer.WMTSLayer.getTileSource(WMTSLayer.java:62)
	... 52 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1479)
	... 70 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:145)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
	... 76 more

[sarxos]

When switched to plain http I'm also observing this one in a log. Not sure if it's connected with the SSL issue, but still think it's worth to mention it:

2019-01-08 16:09:57.679 INFO: GET http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetTile&VERSION=1.0.0&LAYER=ORTOFOTOMAPA&STYLE=default&FORMAT=image/jpeg&tileMatrixSet=EPSG:2180&tileMatrix=EPSG:2180:7&tileRow=38&tileCol=50 -> !!!
2019-01-08 16:09:57.680 WARNING: java.net.SocketException: Unexpected end of file from server
java.net.SocketException: Unexpected end of file from server
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:792)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:789)
	at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:647)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1535)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1440)
	at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:157)
	at org.openstreetmap.josm.tools.HttpClient.connect(HttpClient.java:99)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.loadObject(JCSCachedTileLoaderJob.java:322)
	at org.openstreetmap.josm.data.cache.JCSCachedTileLoaderJob.run(JCSCachedTileLoaderJob.java:231)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)

[sarxos]

I tested this on JNLP version of JOSM on my other Ubuntu machine (14.04, but with OpenJDK 1.8.0_171) and accessing it via SSL works well.

2019-01-08 16:24:41.167 INFO: Silent shortcut conflict: 'tools:turnrestriction' moved by 'Improve OSM:Solve issue' to 'Alt+Shift+F2'.
2019-01-08 16:24:41.543 INFO: GET https://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO?SERVICE=WMTS&REQUEST=GetCapabilities -> 200 (5.09 kB)
2019-01-08 16:24:41.618 INFO: AbstractTileSourceLayer: estimated visible tiles: 20, estimated cache size: 80

$ java -version
openjdk version "1.8.0_171"
OpenJDK Runtime Environment (build 1.8.0_171-8u171-b11-2~14.04-b11)
OpenJDK 64-Bit Server VM (build 25.171-b11, mixed mode)

[Don-vip]

8u51? This version of Java is really, really old and no longer supported for years. I'm in favor of restoring https if it works with up to date versions of Java.

[sarxos]

Hi @Don-vip,

I can confirm that upgrading Oracle Java 8 to build 191 indeed resolved SSL issue. I will revert Geoportal URLs on Wiki back to https.

$ java -version
java version "1.8.0_191"
Java(TM) SE Runtime Environment (build 1.8.0_191-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)

[sarxos]

@Don-vip, @stoecker,

Wiki changes reverting SSL back: https://josm.openstreetmap.de/wiki/Maps/Poland?action=diff&version=134

Thank you for your support!

[Don-vip]

Thanks!

[stoecker]

In 14871/josm:

See #16123 - move TestHTTPS ignores from script to IntegrationTestIgnores page

[stoecker]

Not much progress as far as I can see.

News:

• terinfo.ujbuda.hu → https works, but mapproxy not
• freietonne → fixed links

Recent state:
copied to ticket text

[Don-vip]

ticket for osm-fr issue: ​https://github.com/osm-fr/infrastructure/issues/26

[stoecker]

Recent state

[stoecker]

Preset.zip: New ticket ​https://github.com/depth221/Preset-Franchises_in_Korea/issues/2

[stoecker]

In 14919/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port

[stoecker]

In 14920/josm:

see #16123 - use port 443 for tests always, not a specified non-standard port - last variant failed with {switch:...} statements

[Klumbumbus]

Removing milestone as it seems not useful on this ticket. It would be postponed every month for years.

[stoecker]

Updates