Uploaded image for project: 'CiviCRM'
  1. CiviCRM
  2. CRM-16191

Extensions can't be downloaded due to SSL cert change


    • Type: Bug
    • Status: Done/Fixed
    • Priority: Blocker
    • Resolution: Fixed/Completed
    • Affects Version/s: 4.5.8
    • Fix Version/s: None
    • Labels:
    • Documentation Required?:


      The CiviCRM public extensions directory at https://civicrm.org/extdir/ver=4.5.5|cms=Drupal could not be contacted - please check your webserver can make external HTTP requests or contact CiviCRM team on CiviCRM forum.

      This has been down for several days now. I recommend a notice be put up on the blog for people indicating that there has been an outage and when it is expected to be fixed.

      I've noticed I'm getting a https error on https://civicrm.org on my phone:
      Your connection is not private. ....

      In advanced, it says site can't be visited because it uses HSTS and there is this error.

      Tim Otten wrote Mar 25:
      "We just updated the SSL cert used by civicrm.org yesterday. (It was nearing expiration.) The cert is provided through gandi.net, and I noticed that Gandi is using a new intermediate CA. The webserver is configured with Gandi’s new CA, and I haven’t seen a problem in these configurations:

      • Local civi site (MAMP/OSX)
      • MAMP and Ubuntu 12.04 CLI: php -r 'echo file_get_contents("https://civicrm.org/extdir/ver=4.5.0|cms=Drupal/");’
      • Local browsers (Firefox, Chrome, Safari)

      But this might depend on who provides the CA bundle. What platforms/versions are you guys using? Did you configure a custom CA bundle or use the OS vendor’s bundle?

      If we can confirm it’s an issue with the intermediate CA not being recognized in common server OS, then we try getting certs from a different CA."

      Joe: "It works fine for me in Chrome on Mac, didn't on Firefox 35 on Mac (but works when FF is upgraded to 36), works on Safari on Mac.

      Doesn't work in default browser included in Android 4.4.2 Galaxy 5S nor in Chrome on that Android device.

      Doesn't work on Debian squeeze 6 - obsolete stable, with wheezy being current Debian stable."

      Fabian: "I am on Ubuntu - works on chromium but not on firefox (36)"




            • Assignee:
              joemurray Joe Murray
              joemurray Joe Murray
            • Votes:
              0 Vote for this issue
              3 Start watching this issue


              • Created: