[josm-dev] HTTPS changes on osm.org

Dirk Stöcker openstreetmap at dstoecker.de
Mon Feb 23 09:49:02 UTC 2015


On Mon, 23 Feb 2015, Vincent Privat wrote:

> Tonight osm.org sysadmins briefly switched to another root CA for their
> https certificates (StartSSL), which is not included in Java Root CA
> default list. As a direct consequence it caused download/upload errors for
> all JOSM users since we enabled HTTPS access by default.
>
> This issue is discussed there:
> https://github.com/openstreetmap/operations/issues/2#issuecomment-75379077

Can we ask them to switch to an accepted certificate? I mean JOSM is not a 
small part of the OSM community and I assume osm.org has enough money to 
spend it for a proper certificate. Or they use the same approach as we do 
for josm.openstreetmap.de?

> If we can't find a practical solution we'll have to disable HTTPS by
> default.

A step back.

> I propose to postpone the February release a few days until we clarify the
> situation. If we need to disable https, the sooner the better.

Fine.

Ciao
-- 
http://www.dstoecker.eu/ (PGP key available)



More information about the josm-dev mailing list