Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Bennet Fauber
Is the web server's private key, used to generate the CSR, also needed? If so, perhaps IU cannot share that. On Sat, Jul 30, 2016 at 11:09 PM, Gilles Gouaillardet wrote: > Jeff, > > if my understanding is correct, https requires open-mpi.org is the only > (httpd) domain served on port 443 for

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Gilles Gouaillardet
Jeff, if my understanding is correct, https requires open-mpi.org is the only (httpd) domain served on port 443 for a given IP (e.g. no shared hosting) a certificate is based on host name (e.g. www.open-mpi.org) and can contains wildcards (e.g. *.open-mpi.org) so if the first condition is met, th

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Jeff Squyres (jsquyres)
I knew about letsencrypt (it's sponsored by my own company, Cisco -- huzzah!). But I (apparently foolishly) didn't think SSL was important, and didn't want to bother with figuring out how to do all the SSL-sysadmin-ish things. :-) I just poked around with letsencrypt.org; it looks actually pre

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Craig Inches
There is a free service for certificates, two that I know of infact. https://u3279517.ct.sendgrid.net/wf/click?upn=qX-2F9hdlOtBJqkkUbCt-2B3drquswfMPnDtwkFfaEmEcy91V4H3axTGMk3RKCvbgwjt_oEMJ28Tbv3NCKzw6SHcfLg-2BQFUslP-2Fedy1rAcMv9Llok3vdXkr7HW9otZKm8xVrePhxTKn4s9weY2luiShT-2BiqkjMUdddPt-2FaTtmLzS-2F

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Jeff Squyres (jsquyres)
On Jul 30, 2016, at 12:39 PM, dpchoudh . wrote: > > Having said that, would it not be possible to redirect an https request to a > http request? I believe apache mod-rewrite can do it. Or does this > certificate check happens even before the rewrite? Yes, the certificate check happens before t

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread dpchoudh .
Hi Jeff and all Disclaimer: I know next to nothing about how the web works. Having said that, would it not be possible to redirect an https request to a http request? I believe apache mod-rewrite can do it. Or does this certificate check happens even before the rewrite? Regards Durga The woods

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Bennet Fauber
I'm not complaining, just reporting. I'm sure I'm not alone in appreciating the volunteer time you put into this. -- bennet On Sat, Jul 30, 2016 at 12:31 PM, Jeff Squyres (jsquyres) wrote: > Meh. That's a good point. We might have to pony up the cost for the > certificates, then. :-( > >

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Jeff Squyres (jsquyres)
Meh. That's a good point. We might have to pony up the cost for the certificates, then. :-( (Indiana University provided all this stuff to us for free; now that the community has to pay for our own hosting, the funding has to come from some where). Please bear with us -- all this sysadmin/i

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Bennet Fauber
Thanks, Jeff, Just to note, though, many, many links in Google searches will have the https address. -- bennet On Sat, Jul 30, 2016 at 12:21 PM, Jeff Squyres (jsquyres) wrote: > Hmm. Sorry about this; we just moved the web site from Indiana University to > Host Gator (per > http://www.open-

Re: [OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Jeff Squyres (jsquyres)
Hmm. Sorry about this; we just moved the web site from Indiana University to Host Gator (per http://www.open-mpi.org/community/lists/devel/2016/06/19139.php). I thought I had disabled https for the web site last night when I did the move -- I'll have to check into this. For the meantime, plea

[OMPI users] www.open-mpi.org certificate error?

2016-07-30 Thread Bennet Fauber
I am getting a certificate error from https://www.open-mpi.org/ The owner of www.open-mpi.org has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. and if I go to advanced and ask about the certificate, it says The cert