Bug 565292 - Update site broken?
Summary: Update site broken?
Status: NEW
Alias: None
Product: Eclemma
Classification: Technology
Component: General (show other bugs)
Version: unspecified   Edit
Hardware: PC Mac OS X
: P3 normal
Target Milestone: ---   Edit
Assignee: Marc R. Hoffmann CLA
QA Contact:
URL:
Whiteboard:
Keywords:
: 580889 (view as bug list)
Depends on:
Blocks:
 
Reported: 2020-07-17 05:41 EDT by Christian Dietrich CLA
Modified: 2022-10-12 09:44 EDT (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Dietrich CLA 2020-07-17 05:41:03 EDT 
Hi,

https://update.eclemma.org/ seems to have a invalid certificate

is this intended?
Comment 1 Marc R. Hoffmann CLA 2020-07-17 06:07:54 EDT 
AFAIK https was never supported.

Our update site is directly served from an AWS S3 bucket which does not support https for custom domains. You could use https with the following URL:

https://s3.amazonaws.com/update.eclemma.org/


If we want to support https://update.eclemma.org/ we need to work with eclipse.org as they now own and host the domain eclemma.org and we need their support to issue certificates.
Comment 2 Evgeny Mandrikov CLA 2020-07-17 06:34:03 EDT 
(In reply to Christian Dietrich from comment #0)

Hi Christian,

How did you come to HTTPS?
Our feature.xml refers to HTTP - https://github.com/eclipse/eclemma/blob/v3.1.3/org.eclipse.eclemma.feature/feature.xml#L24
as well as marketplace entry https://marketplace.eclipse.org/content/eclemma-java-code-coverage
Comment 3 Christian Dietrich CLA 2020-07-17 06:35:26 EDT 
i just saw an update site using http
and remembered the troll that created tons
of CVEs for tons of eclipse projects for using http instead of https
Comment 4 Evgeny Mandrikov CLA 2022-10-12 09:44:33 EDT 
*** Bug 580889 has been marked as a duplicate of this bug. ***