lassoan
April 4, 2023, 1:23pm
1
Starting this morning, slicer.org is no longer accessible. It shows this error:
Even if I click on “Advanced”, I just get some more details:
www.slicer.org uses encryption to protect your information. When Microsoft Edge tried to connect to www.slicer.org this time, the website sent back unusual and incorrect credentials. This may happen when an attacker is trying to pretend to be www.slicer.org , or a WiFi sign-in screen has interrupted the connection. Your information is still secure because Microsoft Edge stopped the connection before any data was exchanged.
You can’t visit www.slicer.org at the moment because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.
@Sam_Horvath @jcfr could you investigate?
Sam_Horvath
April 4, 2023, 1:47pm
2
I am looking into it!
For anyone looking for Slicer resources, the download site and the documentation are still available.
1 Like
Sam_Horvath
April 4, 2023, 2:18pm
3
The issue seems to be specific to the slicer.org domain. The slicer.org page can be accessed at the netlify address here:
https://slicer-org.netlify.app/
rbumm
April 5, 2023, 7:42am
4
When I click a https://slicer.org link from a google search I still get
with
NET::ERR_CERT_DATE_INVALID
Subject: wiki.slicer.org
Issuer: R3
Expires on: 03.04.2023
Current date: 05.04.2023
PEM encoded chain:
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISBFWDC+V2Ln0wVapjogmIxZjyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMDMyMTIyMDdaFw0yMzA0MDMyMTIyMDZaMBoxGDAWBgNVBAMT
D3dpa2kuc2xpY2VyLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMYqSdoh9FAU6q7VsKDGJT+BpQnSmNBS7TXKx8HPwH/Cp3q1wSCDQ2m3WE7Vg95C
bCl+XCZTsA44Sprmp0YRv+OKUIwmJTIUbbbzFIddJwjiaDh68dgd4EaZBJV6EOLW
w6dTpKDG9j0jWQyLR27cwp70DaV9xLG+CtcXJSLun9/N2J6SWSVHyo78tUvt5TTg
M8mcJARmMKcT58PY0UYdPRPRlHoBRO0y7DedxRSoZWOxewULvrgotKgF28SEpwnW
ilLXPBq/u3Of1ZXxPhA2wdSlpT2RPuqSLmfP+wPFf7y9mKjG5tJ+vj5wAvSI8PfY
//XACRBGgCDGvmEX/Ph/mSMCAwEAAaOCAtQwggLQMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQU4vcaG6BsORWRUIEHHjkr4Be+cuIwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wgaIGA1UdEQSBmjCBl4IRaXNzdWVzLnNsaWNlci5vcmeCGG1hbnRpc2FyY2hp
dmUuc2xpY2VyLm9yZ4IKbmEtbWljLm9yZ4IKc2xpY2VyLm9yZ4IPd2lraS5uYS1t
aWMub3Jngg53aWtpLm5jaWd0Lm9yZ4IPd2lraS5zbGljZXIub3Jngg53d3cubmEt
bWljLm9yZ4IOd3d3LnNsaWNlci5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAYV5ukKnAAAEAwBIMEYCIQCHFOp/Ttq+bwV3bPAm
bwlb4lB7A17+z8rFU1YMjkTnlQIhAKG19YSEXasxqynqZkM6owcpKqZtE5p7T3I7
OZKSIddxAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGFebpC
YQAABAMARzBFAiBhLVaEkXMZRJI/2I93Ka7axbEqjonwGnwQDVqjPEn5YQIhALqE
DAFXf1aq9cqbM2kDJljg5IsaKNfa4odSEah0vRdPMA0GCSqGSIb3DQEBCwUAA4IB
AQA4/pYVMjyBc/48fQZdZMMiB2grrQN9kEF9NMb2UljGnhPB94tDPF1AGV6PJpC3
JuYFAtz6zil68qyGiLuZ3DvhkwkVHen+pVzzMRI3w/vPk8q75mYCWsdUZnPF92b8
EutX5ceGZienMwUEWtRRRGj8xiCg7gN37i/yNs2qNI8IW9QbRUxVEHGWk2ToavPm
wAYp8PiR9Z7Im4RFYri6I+vWI9Ii68W3NcRoHnmxeSc1vpOJIAMBFVDzbOynjSZI
YWJrnHslG3xv1KqEe2gJ7YB6/SHeYSwPxuuHeJ72AyDWvjzWn2B0dr7AEJmX5b9g
6Vl1KNsrfNxH2l4cz0lMEI0t
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
nLRbwHOoq7hHwg==
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Certificate Transparency:
SCT Sectigo 'Mammoth' CT log (Embedded in certificate, Verified)
SCT Google 'Argon2023' log (Embedded in certificate, Verified)
Schalte für größtmögliche Sicherheit in Chrome das erweiterte Safe Browsing ein
Sam_Horvath
April 5, 2023, 2:14pm
5
Yep. it is still down. We are working on addressing the certificate issue.
Sam_Horvath
April 5, 2023, 2:20pm
6
The certificate issue only affects sites in the slicer.org domain, so the main website and the wiki. Everything else should still be accessible. The main public resource that is still only on the wiki is the Trainings page.
lassoan
April 5, 2023, 7:51pm
8
Thank you, it all looks good now!
jcfr
April 5, 2023, 8:15pm
9
The following websites are all served from cloud instances on which the automated https certificate renewal process failed:
issues.slicer.org
mantisarchive.slicer.org
na-mic.org
slicer.org
wiki.na-mic.org
wiki.ncigt.org
wiki.slicer.org
www.na-mic.org
www.slicer.org
The renewal failure was likely due to the root certificate changes described here . Following this change, the tooling available on the instance probably needed to be updated.
Short term:
As a temporary measure, we implemented the following changes:
converted our testing instance download-staging.slicer.org to serve the slicer.org landing page
updated DNS accordingly
Medium term:
In the next week or two we will further consolidate and will have both the slicer.org landing page and the associated redirects managed by Kitware.
This will ensure the slicer.org instance is monitored and updated along side these instances:
Server
Description
Kitware Hosted
Netlify Hosted
download.slicer.orgSite allowing to download preview and stable application packages
download-staging.slicer.org
Testing server to help with development of the download site Converted to serve slicer.org
slicer-packages.kitware.comSlicer packages backend implementing REST API service (built on Girder) for managing Slicer application and extension packages
slicer.kitware.comSlicer extensions legacy web application to allow older Slicer releases to install extensions through the extensions manager
extension.slicer.orgDeployment of the Slicer extensions catalog
1 Like
pieper
April 6, 2023, 2:19pm
10
jcfr
April 6, 2023, 5:26pm
11
The solution we were able to setup only take care the landing page but many redirect end up being broken.
As hinted above, we are working on transition plan to have the relevant servers managed by Kitware but this will take some time.
1 Like
pieper
April 7, 2023, 1:29pm
12
3 Likes
freephile
April 7, 2023, 1:34pm
13
I just tested those links to confirm they are working now.
2 Likes
lassoan
July 6, 2023, 11:56am
14
This happened again
www.slicer.org is down
@jcfr @freephile could you fix this? Thank you!
jcfr
July 6, 2023, 1:09pm
15
We are almost done transitioning.
Certificate should be renewed shortly. Having a look at this particular issue now.
Background: We are still in the process of transitioning away from the current Digital Ocean cloud infrastructure. Waiting the final steps are completed, the current certificate will need to be renewed.
1 Like
jcfr
July 6, 2023, 3:37pm
16
We are in the process of finalizing the hosting of the Slicer and NA-MIC wiki to static hosting.
lassoan
July 6, 2023, 3:51pm
17
Confirmed that https://www.slicer.org/ works again - thank you for the quick fix!
1 Like
