Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Certificate expired #126

Open
visakhmr opened this issue Feb 23, 2022 · 3 comments
Open

Certificate expired #126

visakhmr opened this issue Feb 23, 2022 · 3 comments

Comments

@visakhmr
Copy link

https://neuroml-db.org SSL certificate has expired

@scrook
Copy link
Owner

scrook commented Feb 23, 2022

We are working on it. I don't know why these things have to be so complicated. Thanks for notification though.

@spanag
Copy link

spanag commented Mar 13, 2024

Since a couple weeks ago, accessing the API fails on HTTPS negotiation when using urllib.request (Python native), wget, and curl.
I can reproduce it on various systems, including Google Colab, the behaviour is the same.
(It seems to be that the URL is redirected to https mode, try curl without -L to see the redirect.)

Apparently there's something off with the server's certificate chain, see https://www.ssllabs.com/ssltest/analyze.html?d=neuroml-db.org (though browsers don't whine at all). But until recently scripts were working fine.

Overriding https authentication is viable, but it's a wrinkle for tutorials.

import urllib.request; # import ssl; ssl._create_default_https_context = ssl._create_unverified_context
urllib.request.urlretrieve(f'http://neuroml-db.org/GetModelZip?modelID=NMLCL000625&version=NeuroML', 'cell.zip')

fails with SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1007)

wget -o cell.zip http://neuroml-db.org/GetModelZip?modelID=NMLCL000625&version=NeuroML

fails with

ERROR: cannot verify neuroml-db.org's certificate, issued by ‘CN=InCommon RSA Server CA 2,O=Internet2,C=US’:
  Unable to locally verify the issuer's authority.
To connect to neuroml-db.org insecurely, use `--no-check-certificate'.
curl -o cell.zip -L http://neuroml-db.org/GetModelZip?modelID=NMLCL000625

also fails with SSL certificate problem: unable to get local issuer certificate.

@scrook
Copy link
Owner

scrook commented Mar 14, 2024

@spanag can you send me a direct email at sharon.crook@asu.edu if you don't mind? My IT person has some questions in trying to fix this quickly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants