Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 473028 - The "Online Package Database" link from www.gentoo.org links to misconfigurated https site of packages.gentoo.org
Summary: The "Online Package Database" link from www.gentoo.org links to misconfigurat...
Status: RESOLVED FIXED
Alias: None
Product: Websites
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All Linux
: Normal blocker (vote)
Assignee: Gentoo Infrastructure
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-06-11 20:30 UTC by J.O. Aho
Modified: 2013-06-14 04:53 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description J.O. Aho 2013-06-11 20:30:01 UTC
Today the link to http://packages.gentoo.org had been changed to https://packages.gentoo.org which do not work as the test to use SNI has failed.

--- copy paste ---
A user is now greeted with the following message:

Empty Page!

If you expected a real website instead something must be wrong. :-(

If you also got an SSL hostname mismatch, your browser doesn't properly support SNI (e.g. IE8 on Windows XP).
-- eof ---

Tested with (all supports SNI):
opera-12.02.1578
seamonkey-2.17.1
firefox-21.0
chromium-25.0.1364.97
konqueror-4.10.3
so this isn't a client issue and have tested on other servers using SNI.

Easy fix is to change the "Online Package Database" link to point back on the http://packages.gentoo.org
Comment 1 J.O. Aho 2013-06-13 05:52:05 UTC
Proof of that the browser supports SNI by visiting https://gentoo.sni.velox.ch:

TLS SNI Test Site: *.sni.velox.ch

Great! Your client [Mozilla/5.0 (X11; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0 SeaMonkey/2.17.1] sent the following TLS server name indication extension (RFC 6066) in its ClientHello (negotiated protocol: TLSv1, cipher suite: ECDHE-RSA-AES256-SHA):

  gentoo.sni.velox.ch

In your request, this header was included:

  Host: gentoo.sni.velox.ch
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2013-06-14 04:53:37 UTC
The site config was broken, fixed