Security certificate expired

[Bobcat00]

I get the following visiting your web site. Your SSL certificate expired Dec 8.

Your connection isn't private
Attackers might be trying to steal your information from checkerframework.org (for example, passwords, messages, or credit cards).
NET::ERR_CERT_DATE_INVALID
This server could not prove that it is checkerframework.org; its security certificate expired in the last day. This may be caused by a misconfiguration or an attacker intercepting your connection.

[mernst]

Thank you! We just noticed a few minutes ago and are working to fix it.
(Something went wrong with the renewal.)

[ben-manes]

fyi this breaks the javadoc tool as it fails to resolve the linked resources.

javadoc: error - Error fetching URL: https://checkerframework.org/api/
1 error

[mernst]

Sorry about this. Last year, we were issued a 1-year certificate instead of a 2-year certificate. We didn't notice this at the time, so we were blindsided by its expiration. We are working to get a valid certificate re-issued. Thanks for your patience!

[mernst]

We have been working on this, but are encountering trouble in our conversations with our certificate issuer. We're about ready to drop them...

Sorry for the delay. We have not forgotten this.

[Bobcat00]

Looks like it's working again?

[mernst]

Yes, it is. At least until next December 21. :-/
I'll close this now. Thanks again for pointing out the problem, and for your patience.

[ben-manes]

JAVA_VERSION=21 ./gradlew javadoc --no-build-cache
...
Task :caffeine:javadoc
error: Error fetching URL: https://checkerframework.org/api/ (javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

The certificate looks fine, but for some reason the javadoc tool fails. I add to the gradle task setFailOnError(true) as a workaround.

[mernst]

Thanks for the bug report.

There was a new intermediate cert from Incommon that had to be installed (in addition to the main certificate). It should be all set now.