Modify

Opened 23 months ago

Closed 23 months ago

Last modified 23 months ago

#23264 closed defect (duplicate)

On startup, JOSM warns of HTTPS certificate error for "wiki.openstreetmap.org"

Reported by: mnalis Owned by: team
Priority: normal Milestone:
Component: Core Version:
Keywords: Cc:

Description

JOSM on startup (via web start) complains that

The website's HTTPS certificate cannot be verified. Do you want to continue?

because apparently

- The digital signature was generated with untrusted certificate.
- Resources contain entries whose signer certificate will expire within six months.

I can connect normally in firefox without any warnings to https://wiki.openstreetmap.org/
I'm using latest stable Debian Bookworm with openjdk-17-jre:amd64 17.0.8+7-1~deb12u1

Clicking on "yes" allows JOSM to load, but should the warnings be displayed?

Those are the detailed versions of certificates from warning windows:

Version 3 
Serial 384412277969459424295139879983875706518607 
Signature Algorithm SHA256withRSA 
Issuer CN=R3, O=Let's Encrypt, C=US 
Validity Validity: [From: Mon Oct 30 20:47:20 CET 2023,
               To: Sun Jan 28 20:47:19 CET 2024] 
Subject CN=wiki.openstreetmap.org 
Signature 0000: A8 FC F3 1E 92 21 F8 10   F6 D3 E2 94 A9 4C 6A B8  .....!.......Lj.
0010: 74 61 34 10 FD 00 0A 8B   74 61 F0 0E 86 1C CF 02  ta4.....ta......
0020: 4C 76 D7 82 61 E1 F6 C9   B2 E5 7D 0B AA E5 1B D2  Lv..a...........
0030: 47 96 41 07 26 96 1D D7   78 E5 CA 4B 2E E9 12 10  G.A.&...x..K....
0040: 2C 79 CA C1 71 21 0F 9E   1B C7 72 63 48 91 52 84  ,y..q!....rcH.R.
0050: 3A F2 48 14 38 4E A7 CB   FF 08 FD CF 24 DC 62 9B  :.H.8N......$.b.
0060: 6A A3 0F F4 F5 EF 1B 4B   2C 08 C1 C8 29 FA 7C F5  j......K,...)...
0070: A5 14 19 55 39 DF 36 FE   CE A9 11 84 A9 1F 1B 1E  ...U9.6.........
0080: 3F EB CA 25 BF 8E C9 F4   E5 29 42 CC 3E 89 6C 2B  ?..%.....)B.>.l+
0090: DB 8E 78 BD F3 30 A1 67   79 74 E3 7E 1E E5 FC E1  ..x..0.gyt......
00A0: 31 5C D4 12 81 30 17 9B   DA E1 3E 6E 28 D3 14 31  1\...0....>n(..1
00B0: 5E EB A9 AD AC 31 FF CF   64 45 3A 3D 17 8D E6 61  ^....1..dE:=...a
00C0: E0 16 B3 0A DF 5B 87 A1   8A 54 C0 02 8F 51 FF BD  .....[...T...Q..
00D0: 91 7F DC 30 48 AA 04 49   64 2F 77 E0 56 9D B7 A2  ...0H..Id/w.V...
00E0: 7D 54 5C 54 1F EC 1D D6   95 52 6B E2 3D E9 EA F0  .T\T.....Rk.=...
00F0: 84 90 74 AF 0A 80 97 42   61 66 53 CD 17 CB AD BD  ..t....BafS.....
 
MD5 Fingerprint 05:20:02:F1:DE:5F:17:88:4B:9E:1C:35:8E:61:47:FE 
SHA1 Fingerprint B9:37:B2:EE:85:2A:CF:E2:1B:5D:E7:A4:E4:A3:AF:A0:D4:6F:CB:B5 

and

Version 3 
Serial 192961496339968674994309121183282847578 
Signature Algorithm SHA256withRSA 
Issuer CN=ISRG Root X1, O=Internet Security Research Group, C=US 
Validity Validity: [From: Fri Sep 04 02:00:00 CEST 2020,
               To: Mon Sep 15 18:00:00 CEST 2025] 
Subject CN=R3, O=Let's Encrypt, C=US 
Signature 0000: 85 CA 4E 47 3E A3 F7 85   44 85 BC D5 67 78 B2 98  ..NG>...D...gx..
0010: 63 AD 75 4D 1E 96 3D 33   65 72 54 2D 81 A0 EA C3  c.uM..=3erT-....
0020: ED F8 20 BF 5F CC B7 70   00 B7 6E 3B F6 5E 94 DE  .. ._..p..n;.^..
0030: E4 20 9F A6 EF 8B B2 03   E7 A2 B5 16 3C 91 CE B4  . ..........<...
0040: ED 39 02 E7 7C 25 8A 47   E6 65 6E 3F 46 F4 D9 F0  .9...%.G.en?F...
0050: CE 94 2B EE 54 CE 12 BC   8C 27 4B B8 C1 98 2F A2  ..+.T....'K.../.
0060: AF CD 71 91 4A 08 B7 C8   B8 23 7B 04 2D 08 F9 08  ..q.J....#..-...
0070: 57 3E 83 D9 04 33 0A 47   21 78 09 82 27 C3 2A C8  W>...3.G!x..'.*.
0080: 9B B9 CE 5C F2 64 C8 C0   BE 79 C0 4F 8E 6D 44 0C  ...\.d...y.O.mD.
0090: 5E 92 BB 2E F7 8B 10 E1   E8 1D 44 29 DB 59 20 ED  ^.........D).Y .
00A0: 63 B9 21 F8 12 26 94 93   57 A0 1D 65 04 C1 0A 22  c.!..&..W..e..."
00B0: AE 10 0D 43 97 A1 18 1F   7E E0 E0 86 37 B5 5A B1  ...C........7.Z.
00C0: BD 30 BF 87 6E 2B 2A FF   21 4E 1B 05 C3 F5 18 97  .0..n+*.!N......
00D0: F0 5E AC C3 A5 B8 6A F0   2E BC 3B 33 B9 EE 4B DE  .^....j...;3..K.
00E0: CC FC E4 AF 84 0B 86 3F   C0 55 43 36 F6 68 E1 36  .......?.UC6.h.6
00F0: 17 6A 8E 99 D1 FF A5 40   A7 34 B7 C0 D0 63 39 35  .j.....@.4...c95
0100: 39 75 6E F2 BA 76 C8 93   02 E9 A9 4B 6C 17 CE 0C  9un..v.....Kl...
0110: 02 D9 BD 81 FB 9F B7 68   D4 06 65 B3 82 3D 77 53  .......h..e..=wS
0120: F8 8E 79 03 AD 0A 31 07   75 2A 43 D8 55 97 72 C4  ..y...1.u*C.U.r.
0130: 29 0E F7 C4 5D 4E C8 AE   46 84 30 D7 F2 85 5F 18  )...]N..F.0..._.
0140: A1 79 BB E7 5E 70 8B 07   E1 86 93 C3 B9 8F DC 61  .y..^p.........a
0150: 71 25 2A AF DF ED 25 50   52 68 8B 92 DC E5 D6 B5  q%*...%PRh......
0160: E3 DA 7D D0 87 6C 84 21   31 AE 82 F5 FB B9 AB C8  .....l.!1.......
0170: 89 17 3D E1 4C E5 38 0E   F6 BD 2B BD 96 81 14 EB  ..=.L.8...+.....
0180: D5 DB 3D 20 A7 7E 59 D3   E2 F8 58 F9 5B B8 48 CD  ..= ..Y...X.[.H.
0190: FE 5C 4F 16 29 FE 1E 55   23 AF C8 11 B0 8D EA 7C  .\O.)..U#.......
01A0: 93 90 17 2F FD AC A2 09   47 46 3F F0 E9 B0 B7 FF  .../....GF?.....
01B0: 28 4D 68 32 D6 67 5E 1E   69 A3 93 B8 F5 9D 8B 2F  (Mh2.g^.i....../
01C0: 0B D2 52 43 A6 6F 32 57   65 4D 32 81 DF 38 53 85  ..RC.o2WeM2..8S.
01D0: 5D 7E 5D 66 29 EA B8 DD   E4 95 B5 CD B5 56 12 42  ].]f)........V.B
01E0: CD C4 4E C6 25 38 44 50   6D EC CE 00 55 18 FE E9  ..N.%8DPm...U...
01F0: 49 64 D4 4E CA 97 9C B4   5B C0 73 A8 AB B8 47 C2  Id.N....[.s...G.
 
MD5 Fingerprint E8:29:E6:5D:7C:43:07:D6:FB:C1:3C:17:9E:03:7A:36 
SHA1 Fingerprint A0:53:37:5B:FE:84:E8:B7:48:78:2C:7C:EE:15:82:7A:6A:F5:A4:05 

Relative:URL: ^/trunk
Repository:UUID: 0c6e7542-c601-0410-84e7-c038aed88b3b
Last:Changed Date: 2023-08-29 13:38:40 +0200 (Tue, 29 Aug 2023)
Revision:18822
Build-Date:2023-08-30 01:30:57
URL:https://josm.openstreetmap.de/svn/trunk

Identification: JOSM/1.5 (18822 en) Linux Debian GNU/Linux 12 (bookworm)
Memory Usage: 366 MB / 3936 MB (260 MB allocated, but free)
Java version: 17.0.8+7-Debian-1deb12u1, Debian, OpenJDK 64-Bit Server VM
Look and Feel: javax.swing.plaf.metal.MetalLookAndFeel
Screen: :0.0 1920×1080 (scaling 1.00×1.00)
Maximum Screen Size: 1920×1080
Best cursor sizes: 16×16→16×16, 32×32→32×32
Environment variable LANG: C.UTF-8
System property file.encoding: UTF-8
System property sun.jnu.encoding: UTF-8
Locale info: en
Numbers with default locale: 1234567890 -> 1234567890
Desktop environment: ICEWM
VM arguments: [--patch-module=java.desktop=/usr/share/icedtea-web/javaws.jar:, --add-reads=java.base=ALL-UNNAMED,java.desktop, --add-reads=java.desktop=ALL-UNNAMED,java.naming, --add-reads=java.naming=ALL-UNNAMED,java.desktop, --add-exports=java.desktop/sun.awt=ALL-UNNAMED,java.desktop, --add-exports=java.desktop/javax.jnlp=ALL-UNNAMED,java.desktop, --add-exports=java.base/com.sun.net.ssl.internal.ssl=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.net.www.protocol.jar=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.security.action=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.security.provider=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.security.util=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.security.validator=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.security.x509=ALL-UNNAMED,java.desktop, --add-exports=java.base/jdk.internal.util.jar=ALL-UNNAMED,java.desktop, --add-exports=java.base/sun.net.www.protocol.http=ALL-UNNAMED,java.desktop, --add-exports=java.desktop/sun.awt.X11=ALL-UNNAMED,java.desktop, --add-exports=java.desktop/sun.applet=ALL-UNNAMED,java.desktop, --add-exports=java.desktop/sun.applet=ALL-UNNAMED,jdk.jsobject, --add-exports=java.naming/com.sun.jndi.toolkit.url=ALL-UNNAMED,java.desktop, -Dicedtea-web.bin.name=javaws, -Dicedtea-web.bin.location=/usr/share/icedtea-web/bin/javaws.sh, -Djava.security.manager, -Djava.security.policy=/etc/icedtea-web/javaws.policy]

Plugins:
+ DirectUpload (36178)
+ FixAddresses (36126)
+ PicLayer (1.0.3)
+ apache-commons (36176)
+ apache-http (36176)
+ areaselector (2.6.2)
+ austriaaddresshelper (88)
+ buildings_tools (36178)
+ conflation (0.6.11)
+ ejml (36176)
+ imagery_offset_db (36126)
+ jna (36176)
+ jts (36004)
+ log4j (36176)
+ pt_assistant (630)
+ reverter (36126)
+ turnrestrictions (36178)
+ undelete (36126)
+ utilsplugin2 (36178)
+ wikipedia (605)

Tagging presets:
+ https://<user.name>.com/prezentacije/OpenStreetMap/josm-preset.xml
+ https://raw.githubusercontent.com/OpenNauticalChart/josm/master/INT-1-preset.xml
+ https://josm.openstreetmap.de/josmfile?page=Presets/Healthcare&zip=1

Map paint styles:
- https://josm.openstreetmap.de/josmfile?page=Styles/PublicTransport&zip=1
+ http://bezdomni.net/Styles_HighlightedCapesBays-style.mapcss
+ https://josm.openstreetmap.de/josmfile?page=Styles/ColorWays&zip=1
- https://josm.openstreetmap.de/josmfile?page=Styles/Coloured_Streets&zip=1
- https://josm.openstreetmap.de/josmfile?page=Styles/Fixme&zip=1
- https://josm.openstreetmap.de/josmfile?page=Styles/Modified&zip=1

Validator rules:
+ https://josm.openstreetmap.de/josmfile?page=Rules/KeepRight&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/QAToolInspiredValidations&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/OSMLint&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/MissingWeekdays&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/SourceObjectTag&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/IndoorRules&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/Pictures&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/MissingOpeningHours&zip=1
+ https://josm.openstreetmap.de/josmfile?page=Rules/CheckDate&zip=1

Last errors/warnings:
- 00118.887 W: java.io.IOException: Cannot run program "xdg-open": error=13, Permission denied. Cause: java.io.IOException: error=13, Permission denied
- 00118.890 E: Handled by bug report queue: java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!
- 00121.288 W: java.io.IOException: Cannot run program "xdg-open": error=13, Permission denied. Cause: java.io.IOException: error=13, Permission denied
- 00121.290 E: Handled by bug report queue: java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!
- 00123.095 W: java.io.IOException: Cannot run program "xdg-open": error=13, Permission denied. Cause: java.io.IOException: error=13, Permission denied
- 00123.097 E: Handled by bug report queue: java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!
- 00125.045 W: java.io.IOException: Cannot run program "xdg-open": error=13, Permission denied. Cause: java.io.IOException: error=13, Permission denied
- 00125.047 E: Handled by bug report queue: java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!
- 00134.209 W: java.io.IOException: Cannot run program "xdg-open": error=13, Permission denied. Cause: java.io.IOException: error=13, Permission denied
- 00134.212 E: Handled by bug report queue: java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!



=== REPORTED CRASH DATA ===
BugReportExceptionHandler#handleException:
No data collected.

Warning issued by: BugReportExceptionHandler#handleException

=== STACK TRACE ===
Thread: Bug report sender (103)
java.lang.UnsupportedOperationException: The BROWSE action is not supported on the current platform!
	at java.desktop/java.awt.Desktop.checkActionSupport(Desktop.java:381)
	at java.desktop/java.awt.Desktop.browse(Desktop.java:531)
	at org.openstreetmap.josm.tools.PlatformHookUnixoid.openUrl(PlatformHookUnixoid.java:76)
	at org.openstreetmap.josm.tools.OpenBrowser.displayUrl(OpenBrowser.java:41)
	at org.openstreetmap.josm.tools.OpenBrowser.displayUrl(OpenBrowser.java:66)
	at org.openstreetmap.josm.gui.bugreport.DefaultBugReportSendingHandler.sendingBugReport(DefaultBugReportSendingHandler.java:30)
	at org.openstreetmap.josm.tools.bugreport.BugReportSender.run(BugReportSender.java:96)

Attachments (4)

josm1.png (5.2 KB ) - added by mnalis 23 months ago.
josm2.png (3.1 KB ) - added by mnalis 23 months ago.
josm3.png (10.2 KB ) - added by mnalis 23 months ago.
josm4.png (10.4 KB ) - added by mnalis 23 months ago.

Download all attachments as: .zip

Change History (6)

by mnalis, 23 months ago

Attachment: josm1.png added

by mnalis, 23 months ago

Attachment: josm2.png added

by mnalis, 23 months ago

Attachment: josm3.png added

by mnalis, 23 months ago

Attachment: josm4.png added

comment:1 by taylor.smock, 23 months ago

Resolution: othersoftware
Status: newclosed

I think something is borked in the debian configuration, not the JOSM configuration. Please report this to the icedtea-netx maintainers. They probably don't have the ISRG Root X1 certificate authority enabled.

The following sites had issues (non-exhaustive):

In any case, we cannot fix this.

Additional information:

comment:2 by taylor.smock, 23 months ago

Resolution: othersoftwareduplicate

Marked as duplicate of #18390.

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain team.
as The resolution will be set.
The resolution will be deleted. Next status will be 'reopened'.

Add Comment


E-mail address and name can be saved in the Preferences .
 
Note: See TracTickets for help on using tickets.