New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HTTPS support for staticmap.openstreetmap.de #25

Closed
Tigerfell opened this Issue Oct 5, 2018 · 7 comments

Comments

Projects
None yet
4 participants
@Tigerfell

Tigerfell commented Oct 5, 2018

The OSM Wiki currently uses this service to display static maps on its pages. The Wiki itself uses HTTPS but this subpage offers HTTP only. This causes mixed content warnings. Could you please consider adding this.

If this is the wrong place to post this, please forward it to some other repository.
This was already discussed in the wiki.

@giggls

This comment has been minimized.

giggls commented Oct 5, 2018

grmpf I not even wanted to re-enable staticmap at all.

There is a German saying:
"Man reicht den kleinen Finger und er nimmt die ganze Hand"

We might enable https at some stage at the new FOSSGIS Server, but as I need a wildcard certificate to do this I have to check DNS delegation with FOSSGIS administration. I actually already did this but did not consider this a top priority and still do not.

@harry-wood

This comment has been minimized.

harry-wood commented Oct 7, 2018

This is newly mentioned here, not because of "mixed content warnings" (a minor irritation) but because of the newly introduced usage restriction of requiring referrer headers. The two things combined mean that https sites can no longer use the static maps service at all.

The message we get:

screen shot 2018-10-03 at 15 30 11

...suggests web developers or even end users did something wrong.

I was confused about this because browser behaviour is somewhat erratic as far as I can see, but mostly browsers won't send the referrer header to the image host if it's on a https website. I guess it's browser caching making it erratic. Try swapping between these two in different browsers:
http://harrywood.co.uk/maps/examples/static-image/staticmaplite.html
https://harrywood.co.uk/maps/examples/static-image/staticmaplite.html

So basically it doesn't really make sense to require referrers while not serving over https. But better than nothing I suppose. Thanks for doing something to avoid yanking the service completely.

@Tigerfell

This comment has been minimized.

Tigerfell commented Oct 27, 2018

@giggls Has there been any progress on this?
I can not see the maps on any wiki page (tracking protection not used, using default settings). It is good that FOSSGIS offers the service, but apparently it is not usable.

@giggls

This comment has been minimized.

giggls commented Oct 27, 2018

If there is something which does not help progress at all, then its postings asking for progress. Quite the opposite it takes my time answering questions like these.

I need a Wildcard certificate for *.openstreetmap.de and I currently do not have a nameserver to handle this. While it would be easy enough to set up bind for this purpose, I think this should be done by FOSSGIS admin not me and this is why there is no progress currently.

Frankly I do not care about staticmap that much as I think this should be hosted by osm.org anyway (if at all) not me.

This said, the first thing I'm looking at enabling SSL for is the other projects running on http://everest.openstreetmap.de

@Nakaner

This comment has been minimized.

Contributor

Nakaner commented Oct 27, 2018

This issue is not related to this repository. Therefore, I close this issue.

@Nakaner Nakaner closed this Oct 27, 2018

@Tigerfell

This comment has been minimized.

Tigerfell commented Oct 27, 2018

@Nakaner Which repository would be the correct one if not this one?

@Nakaner

This comment has been minimized.

Contributor

Nakaner commented Oct 27, 2018

@Tigerfell none

harry-wood added a commit to harry-wood/SimpleMap that referenced this issue Dec 2, 2018

Swap to use a working static map service
Swap to use maps.wikimedia.org/img/ static map service (Kartotherian,
documented here:
https://github.com/kartotherian/kartotherian/#static-map-images ),
rather than the broken http://staticmap.openstreetmap.de service (See
fossgis/openstreetmap.de#25 )
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment