Hi,

Thanks for the report, the "content.scientificlinux.org" links shouldn't 
be there.....

I'll take a look.

Pat

On 06/08/2015 09:27 AM, Hogben, Colin H wrote:
> Hi,
> I'm having problems accessing the Scientific Linux web site.  Many of 
> the resources linked from www.scientificlinux.org are pages on 
> https://content.scientificlinux.org but there appear to be two 
> problems with SSL configuration on the server side for this host.
>
> Firstly, the server certificate is not valid for the hostname 
> content.scientificlinux.org - Firefox reports:
>
> content.scientificlinux.org uses an invalid security certificate.
> The certificate is only valid for the following names:
>   uhosts.fnal.gov , cd-docdb.fnal.gov , osg-docdb.opensciencegrid.org 
> , www.darkenergysurvey.org , www.usluo.org , www.scientificlinux.org , 
> staging.scientificlinux.org , www.uslua.org
> (Error code: ssl_error_bad_cert_domain)
>
> Secondly, even if you click through the warnings and accept the 
> invalid certificate, the SSL handshake fails, apparently because the 
> server is requesting a client certificate.  Firefox reports:
>
> Secure Connection Failed
> An error occurred during a connection to content.scientificlinux.org.
> SSL peer was unable to negotiate an acceptable set of security 
> parameters.
> (Error code: ssl_error_handshake_failure_alert)
>
> I found a workaround: when the browser displays its error message, 
> manually replace "content" with "www" in the address bar.  However 
> this is tedious to say the least!
>
> I hope someone can sort out this certificate problem, as I think it 
> reflects badly on a great project.
>
> Regards,

-- 
Pat Riehecky
Scientific Linux developer

Fermi National Accelerator Laboratory
www.fnal.gov
www.scientificlinux.org