Application / Passage au https #565

stephyritz · 2020-11-27T13:59:34Z

Passer Metawal en https et vérifier que toutes les interactions fonctionnent encore correctement : process FME (DE), synchro Géoportail ou encore moissonnage INSPIRE.

fxprunayre · 2021-05-17T13:48:53Z

Ici le travail est à faire côté serveur web (DTIC?). Ensuite admin > paramètre et changer le protocol à 443 / HTTPs par défaut (au lieu de 80).

vbombaerts · 2021-05-19T12:24:38Z

@davinciagf Tu peux me rédiger une demande que je transmettrai au DTIC dans un ticket STP ?

vbombaerts · 2021-05-26T15:33:26Z

Le ticket a été introduit. J'attends la réaction du DTIC.

vbombaerts · 2021-05-27T12:20:16Z

Metawal test est en https. Il faut valider le fonctionnement.

fxprunayre · 2021-05-27T12:24:39Z

Ce qui serait bien c'est d'avoir un redirect sur toutes les requêtes http://metawal4.test.wallonie.be/.* > https://metawal4.test.wallonie.be/.*. A faire côté serveur web.

J'ai adapté la config

Ensuite, faudra mettre à jour toutes les URLs dans les fiches.

Y'a des soucis de certificats https://metawal4.test.wallonie.be/geonetwork/warninghealthcheck


    "name": "DashboardAppHealthCheck",
    "status": "ERROR",
    "msg": "sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
    "exception": "javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\n\tat sun.security.ssl.Alerts.getSSLException(Alerts.java:192)\n\tat sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)\n\tat sun.security.ssl.Handshaker.fatalSE(Handshaker.j

vbombaerts · 2021-05-27T14:25:31Z

@davinciagf Préviens-moi quand ce sera stabilisé au niveau Metawal. Je pourrai alors demander aux collègues de vérifier s'ils ont des dysfonctionnements (Géoportail, FME, ...)

davinciagf · 2021-06-03T12:50:28Z

Problème de synchronisation rencontré au niveau Geoportail (cf échange de mails) - correctif par le DTIC (problème de validation du certificat ?). A valider

vbombaerts · 2021-07-01T07:35:54Z

Certificat installé.
Pour le moment, Metawal reste accessible en http et https sans redirection.

vbombaerts · 2021-07-26T07:41:02Z

Erreur lors de la tentative de moissonnage de la prod par la valid en https :
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Voici le log

2021-07-26T09:35:29,161+0200 INFO  [Prod] - Starting harvesting of Prod
2021-07-26T09:35:29,183+0200 INFO  [Prod] - Started harvesting from node : Prod (CswHarvester)
2021-07-26T09:35:29,227+0200 WARN  [Prod] - Raised exception while harvesting from : Prod (CswHarvester)
2021-07-26T09:35:29,227+0200 WARN  [Prod] -  (C) Class   : SSLHandshakeException
2021-07-26T09:35:29,227+0200 WARN  [Prod] -  (C) Message : sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2021-07-26T09:35:29,227+0200 ERROR [Prod] - sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)
	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
	at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
	at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)
	at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.upgrade(DefaultHttpClientConnectionOperator.java:191)
	at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.upgrade(PoolingHttpClientConnectionManager.java:390)
	at org.fao.geonet.utils.GeonetHttpRequestFactory$3.upgrade(GeonetHttpRequestFactory.java:226)
	at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:428)
	at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
	at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
	at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
	at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
	at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
	at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
	at org.fao.geonet.utils.GeonetHttpRequestFactory.execute(GeonetHttpRequestFactory.java:182)
	at org.fao.geonet.utils.AbstractHttpRequest.doExecute(AbstractHttpRequest.java:243)
	at org.fao.geonet.utils.XmlRequest.executeAndReadResponse(XmlRequest.java:118)
	at org.fao.geonet.utils.XmlRequest.execute(XmlRequest.java:85)
	at org.fao.geonet.kernel.harvest.harvester.csw.Harvester.retrieveCapabilities(Harvester.java:183)
	at org.fao.geonet.kernel.harvest.harvester.csw.Harvester.harvest(Harvester.java:109)
	at org.fao.geonet.kernel.harvest.harvester.csw.CswHarvester.doHarvest(CswHarvester.java:85)
	at org.fao.geonet.kernel.harvest.harvester.AbstractHarvester$HarvestWithIndexProcessor.process(AbstractHarvester.java:605)
	at org.fao.geonet.kernel.harvest.harvester.AbstractHarvester.harvest(AbstractHarvester.java:676)
	at org.fao.geonet.kernel.harvest.harvester.HarvesterJob.execute(HarvesterJob.java:69)
	at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
	at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
	at sun.security.validator.Validator.validate(Validator.java:260)
	at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
	... 30 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)
	... 36 more

vbombaerts · 2021-07-27T06:15:38Z

Idem pour le moissonnage de la valid depuis la test

davinciagf · 2021-09-24T13:03:46Z

Ne faudrait-il pas copier le certificat au niveau du keystore du JAVA ?

Genre :
keytool -trustcacerts -keystore "%JAVA_HOME%jre\lib\security\cacerts" -storepass changeit -importcert -alias <alias_name> -file <path_to_crt_file>

List des certificats
keytool -list -trustcacerts -keystore "%JAVA_HOME%jre\lib\security\cacerts" -storepass changeit

Suppression d'un certificat:
keytool -delete -alias <alias_name> -keystore "%JAVA_HOME%jre\lib\security\cacerts" -storepass changeit

vbombaerts · 2021-09-24T13:08:10Z

Ce n'est pas impossible. Tu peux dépatouiller ça avec le DTIC stp ?

davinciagf · 2021-09-24T15:30:13Z

Didier a rajouté les certificats . A vérifier si c'est ok.

vbombaerts · 2021-10-05T13:37:51Z

Il faut aussi prévoir un script pour passer toutes les adresses http://metawal en https://metawal

davinciagf · 2021-10-13T08:08:12Z

UPDATE metadata SET data = replace(data, 'http://metawal.wallonie.be/', 'https://metawal.wallonie.be/') WHERE data LIKE '%http://metawal.wallonie.be/%';

stephyritz added this to the Future release milestone Nov 27, 2020

stephyritz changed the title ~~Application / Passage au http~~ Application / Passage au https Nov 27, 2020

stephyritz added the criticité.mineur label Nov 27, 2020

vbombaerts modified the milestones: Future release, 4.0.3 Apr 8, 2021

fxprunayre mentioned this issue May 17, 2021

GN-UI / Embarquer dans Jahia #592

Closed

fxprunayre added the DTIC-help-needed label May 17, 2021

vbombaerts assigned davinciagf and vbombaerts May 19, 2021

vbombaerts unassigned davinciagf May 26, 2021

vbombaerts removed the DTIC-help-needed label May 27, 2021

vbombaerts assigned davinciagf May 27, 2021

davinciagf mentioned this issue May 27, 2021

Local host #590

Closed

vbombaerts mentioned this issue Jun 15, 2021

Mise en prod de la version 4.0.4 #602

Closed

14 tasks

vbombaerts added criticité.majeur DTIC-help-needed and removed criticité.mineur labels Jul 26, 2021

vbombaerts modified the milestones: 4.0.4, 4.0.7 Sep 9, 2021

vbombaerts mentioned this issue Sep 23, 2021

Moissonnage - problème avec le moissonnage de fiches mélangées ISO 19115-3 et ISO19139 #657

Closed

vbombaerts mentioned this issue Sep 24, 2021

Validation INSPIRE en batch via CSW INSPIRE #628

Closed

davinciagf assigned fxprunayre and unassigned vbombaerts Sep 24, 2021

davinciagf mentioned this issue Sep 30, 2021

L'analyse des liens ne fonctionne pas #606

Closed

vbombaerts mentioned this issue Oct 13, 2021

Passage des adresses http://metawal en https://metawal #670

Closed

vbombaerts mentioned this issue Oct 29, 2021

Mise en prod version 4.0.7 #683

Closed

5 tasks

vbombaerts closed this as completed Jan 23, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Application / Passage au https #565

Application / Passage au https #565

stephyritz commented Nov 27, 2020

fxprunayre commented May 17, 2021

vbombaerts commented May 19, 2021

vbombaerts commented May 26, 2021

vbombaerts commented May 27, 2021

fxprunayre commented May 27, 2021 •

edited

Loading

vbombaerts commented May 27, 2021

davinciagf commented Jun 3, 2021

vbombaerts commented Jul 1, 2021 •

edited

Loading

vbombaerts commented Jul 26, 2021

vbombaerts commented Jul 27, 2021

davinciagf commented Sep 24, 2021 •

edited

Loading

vbombaerts commented Sep 24, 2021

davinciagf commented Sep 24, 2021

vbombaerts commented Oct 5, 2021

davinciagf commented Oct 13, 2021

Application / Passage au https #565

Application / Passage au https #565

Comments

stephyritz commented Nov 27, 2020

fxprunayre commented May 17, 2021

vbombaerts commented May 19, 2021

vbombaerts commented May 26, 2021

vbombaerts commented May 27, 2021

fxprunayre commented May 27, 2021 • edited Loading

vbombaerts commented May 27, 2021

davinciagf commented Jun 3, 2021

vbombaerts commented Jul 1, 2021 • edited Loading

vbombaerts commented Jul 26, 2021

vbombaerts commented Jul 27, 2021

davinciagf commented Sep 24, 2021 • edited Loading

vbombaerts commented Sep 24, 2021

davinciagf commented Sep 24, 2021

vbombaerts commented Oct 5, 2021

davinciagf commented Oct 13, 2021

fxprunayre commented May 27, 2021 •

edited

Loading

vbombaerts commented Jul 1, 2021 •

edited

Loading

davinciagf commented Sep 24, 2021 •

edited

Loading