Re: gnuplot.info unreachable (test.gnuplot.info?)
Juhász Péter <[email protected]> Thu, 11 Sep 2025 19:08:31 +0200
| Newsgroups | gmane.comp.graphics.gnuplot.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============4260535816465745620== Content-Type: multipart/alternative; boundary="=-mflFnU5F+hWU02hOlK/q" --=-mflFnU5F+hWU02hOlK/q Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable The plot thickens. I wanted to check on crt.sh (a certificate search facility) what certs were issued for gnuplot.info in the past. To my surprise, I didn't find any. However, they list test.gnuplot.info (and www.test.gnuplot.info) for which a certificate was issued first on 2024-03-02 and renewed ever since. And indeed, test.gnuplot.info does work with https. I did not know that this domain exists. Should it? Peter On Wed, 2025-09-10 at 20:17 -0700, Ethan A Merritt wrote: > Thanks for the pointers.=C2=A0 >=20 > After poking around in the SourceForge admin pages I found a place to > set up "virtual domains". Both gnuplot.info and www.gnuplot.info are > already listed there. That same page states that https access can be > enabled by request, so I placed a support request with the > SourceForge site itself to enable https access via gnuplot.info and > www.gnuplot.info.=C2=A0 We'll see what happens. >=20 > https://sourceforge.net/p/forge/site-support/27031/ >=20 > =C2=A0Ethan >=20 > On Wed, Sep 10, 2025 at 5:18=E2=80=AFPM Mojca Miklavec Groenhuis > <[email protected]> wrote: > > On Thu, 11 Sept 2025, 00:=E2=80=8A45 Ethan A Merritt, <merritt@=E2=80= =8Auw.=E2=80=8Aedu> > > wrote: On Wed, Sep 10, 2025 at 11:=E2=80=8A35 AM Juh=C3=A1sz P=C3=A9ter > > <peter.=E2=80=8Ajuhasz83@=E2=80=8Agmail.=E2=80=8Acom> wrote: The error = message means that > > the certificate required to serve the site over HTTPS > > ZjQcmQRYFpfptBannerStart > >=20 > >=20 > >=20 > > This Message Is From an Untrusted Sender=20 > >=20 > > You have not previously corresponded with this sender.=20 > >=20 > > See https://itconnect.uw.edu/email-tags for additional information. > > Please contact the UW-IT Service Center, [email protected] 206.221.5000, > > for assistance.=20 > >=20 > >=20 > > =C2=A0 > >=20 > > ZjQcmQRYFpfptBannerEnd > >=20 > >=20 > > On Thu, 11 Sept 2025, 00:45 Ethan A Merritt, <[email protected]> > > wrote: > > >=20 > > >=20 > > > On Wed, Sep 10, 2025 at 11:35=E2=80=AFAM Juh=C3=A1sz P=C3=A9ter > > > <[email protected]> wrote: > > > >=20 > > > > The error message means that the certificate required to serve > > > > the site over HTTPS is not valid for the domain name > > > > gnuplot.info [1] (nor www.gnuplot.info [2]). If you look at the > > > > certificate (offered by Firefox next to the error message), you > > > > can see that it was issued by Let's Encrypt to > > > > secureprojects.sourceforge.net [3], and it is valid for a large > > > > selection of other domain names, presumably all projects hosted > > > > by SF.=20 > > > >=20 > > >=20 > > >=20 > > > Thank you for your insights. > > >=20 > > > I think you are addressing a different issue - whether the > > > connection protocol is https or http. > >=20 > > Yes, this is not about DNS failure. I don't experience DNS failure, > > but see precisely the same errors/issues as Peter described. > >=20 > > (Nowadays http should actually redirect to https. Modern browsers > > also refuse to show http pages.) > >=20 > > > It is not surprising that a certificate issued to SourceForge > > > would not mention gnuplot.info [1] by name because that name is > > > not connected to SourceForge except in that (as I understand it) > > > it currently redirects queries to the actual gnuplot site > > > gnuplot.sourceforge.net [4]. > >=20 > > Except that it does matter for https. The hosting site needs to > > know that the certificate should also be for gnuplot.info [1]=C2=A0 and > > it needs to be explicit whether that is with or without www (or > > both). > > Either a separate certificate is needed for that, or the > > certificate used needs to be made aware that it needs to cover > > gnuplot.info [1]. This really needs to be fixed on the hosting > > site, and usually the person in charge of the DNS is also needed in > > the process of making it work. > >=20 > > Unless the administrators of gnuplot on SF have access to > > certificate settings (means you would also need to create and > > extend your own certificate), then SF support is really needed here > > to set it up.=C2=A0 > >=20 > > > The current problem seems to be that the redirection itself fails > > > in some cases, or fails to pass through sufficient information > >=20 > > No. It's really a misconfigured site/certificate. > >=20 > > > You still see the site, correct? > >=20 > > Well ... yes and no, but the more correct answer is probably NO. By > > default you don't see the site because the web browser is > > protecting you from "the malicious site" until you approve an > > exception and security risk, but that is "an advanced use" (it is > > on purpose made difficult to do that). > >=20 > > > For completeness I should mention that the issue of connection > > > via IPv6 as opposed to IPv4 was raised earlier, and might be > > > relevant, > >=20 > > It is possible that the site works correctly on IPv4 and fails with > > IPv6. My network right now doesn't support IPv6, so it's hard for > > me to check. It is unrelated to certificate issues, but it could > > hypothetically explain why DNS works for others and not for you if > > you have IPv6. (By correctly I mean resolving to the correct > > website. It still doesn't serve a compliant certificate.) > >=20 > > Mojca > >=20 >=20 >=20 > --=20 > Ethan A Merritt > Department of Biochemistry > University of Washington, Seattle >=20 > _______________________________________________ > gnuplot-beta mailing list > [email protected] > Membership management via: > https://lists.sourceforge.net/lists/listinfo/gnuplot-beta [1] gnuplot.info https://urldefense.com/v3/__http://gnuplot.info__;!!K-Hz7m0Vt54!koofFjC= mBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl4ZSgERWeODc= 4D2Pme$ [2] www.gnuplot.info https://urldefense.com/v3/__http://www.gnuplot.info__;!!K-Hz7m0Vt54!hZA= tTCSEA3UZsTRDYd1Rlg-J8_Oq7DJZg-cJMaMoMBMcyZx3lwvCVqHE401p-ZikRUWZruc71FaDNh= ZkYYE3tw4$ [3] secureprojects.sourceforge.net https://urldefense.com/v3/__http://secureprojects.sourceforge.net__;!!K= -Hz7m0Vt54!koofFjCmBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_j= Ce9wWKl4ZSgERWeODadFrph0$ [4] gnuplot.sourceforge.net https://urldefense.com/v3/__http://gnuplot.sourceforge.net__;!!K-Hz7m0V= t54!koofFjCmBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl= 4ZSgERWeODckxZJT_$ --=-mflFnU5F+hWU02hOlK/q Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html><head><style>pre,code,address { margin: 0px; } h1,h2,h3,h4,h5,h6 { margin-top: 0.2em; margin-bottom: 0.2em; } ol,ul { margin-top: 0em; margin-bottom: 0em; } blockquote { margin-top: 0em; margin-bottom: 0em; } </style></head><body><div>The plot thickens.</div><div><br></div><div>I wan= ted to check on crt.sh (a certificate search facility) what certs were issu= ed for gnuplot.info in the past. To my surprise, I didn't find any. However= , they list test.gnuplot.info (and <a href=3D"https://www.test.gnuplot.info= ">www.test.gnuplot.info</a>) for which a certificate was issued first on 20= 24-03-02 and renewed ever since. And indeed, test.gnuplot.info does work wi= th https.</div><div><br></div><div>I did not know that this domain exists. = Should it?</div><div><br></div><div>Peter</div><div><br></div><div>On Wed, = 2025-09-10 at 20:17 -0700, Ethan A Merritt wrote:</div><blockquote type=3D"= cite" style=3D"margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-lef= t:1ex"><div dir=3D"ltr">Thanks for the pointers. <div><br></div><div>A= fter poking around in the SourceForge admin pages I found a place to set up= "virtual domains". Both <a href=3D"http://gnuplot.info">gnuplot.info</a> a= nd <a href=3D"http://www.gnuplot.info">www.gnuplot.info</a> are already lis= ted there. That same page states that https access can be enabled by reques= t, so I placed a support request with the SourceForge site itself to enable= https access via <a href=3D"http://gnuplot.info">gnuplot.info</a> and <a h= ref=3D"http://www.gnuplot.info">www.gnuplot.info</a>. We'll see what = happens.<div><div><br></div><div><a href=3D"https://sourceforge.net/p/forge= /site-support/27031/">https://sourceforge.net/p/forge/site-support/27031/</= a></div></div></div><div><br></div><div> Ethan</div></div><div><br></d= iv><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class= =3D"gmail_attr">On Wed, Sep 10, 2025 at 5:18=E2=80=AFPM Mojca Miklavec Groe= nhuis <<a href=3D"mailto:[email protected]">mojca.miklavec.= [email protected]</a>> wrote:<br></div><blockquote type=3D"cite" style=3D"= margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div cla= ss=3D"msg4374360140472394798"><div style=3D"font-size:1px;color:rgb(255,255= ,255);line-height:1px;height:0px;max-height:0px;opacity:0;overflow:hidden;d= isplay:none">On Thu, 11 Sept 2025, 00:=E2=80=8A45 Ethan A Merritt, <merr= itt@=E2=80=8Auw.=E2=80=8Aedu> wrote: On Wed, Sep 10, 2025 at 11:=E2=80= =8A35 AM Juh=C3=A1sz P=C3=A9ter <peter.=E2=80=8Ajuhasz83@=E2=80=8Agmail.= =E2=80=8Acom> wrote: The error message means that the certificate requir= ed to serve the site over HTTPS</div><div style=3D"font-size:1px;color:rgb(= 255,255,255);line-height:1px;max-height:0px;opacity:0;overflow:hidden;displ= ay:none">ZjQcmQRYFpfptBannerStart</div><u></u> <div dir=3D"ltr" id=3D"m_437= 4360140472394798pfptBannerysieu2c" style=3D"display:block;text-align:left;m= argin:16px 0px;padding:8px 16px;border-radius:4px;min-width:200px;backgroun= d-color:rgb(208,216,220);border-top:4px solid rgb(144,164,174)"> <div id=3D= "m_4374360140472394798pfptBannerysieu2c" style=3D"float:left;display:block;= margin:0px 0px 1px;max-width:600px"> <div id=3D"m_4374360140472394798pfptBa= nnerysieu2c" style=3D"display:block;background-color:rgb(208,216,220);color= :rgb(0,0,0);font-family:Arial,sans-serif;font-weight:bold;font-size:14px;li= ne-height:18px"> This Message Is From an Untrusted Sender </div> <div id=3D= "m_4374360140472394798pfptBannerysieu2c" style=3D"font-weight:normal;displa= y:block;background-color:rgb(208,216,220);color:rgb(0,0,0);font-family:Aria= l,sans-serif;font-size:12px;line-height:18px;margin-top:2px">You have not p= reviously corresponded with this sender. </div> <div id=3D"m_43743601404723= 94798pfptBannerysieu2c" style=3D"font-weight:normal;display:block;backgroun= d-color:rgb(208,216,220);color:rgb(0,0,0);font-family:Arial,sans-serif;font= -size:12px;line-height:18px;margin-top:2px">See <a href=3D"https://itconnec= t.uw.edu/email-tags" target=3D"_blank">https://itconnect.uw.edu/email-tags<= /a> for additional information. Please contact the UW-IT Service Center, <= a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a> 206.221.500= 0, for assistance. </div> </div> <div style=3D"height:0px;clear:both;displa= y:block;line-height:0;font-size:0.01px"> </div> </div><u></u><div styl= e=3D"font-size:1px;color:rgb(255,255,255);line-height:1px;max-height:0px;op= acity:0;overflow:hidden;display:none">ZjQcmQRYFpfptBannerEnd</div><div dir= =3D"auto"><div><br><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D= "gmail_attr">On Thu, 11 Sept 2025, 00:45 Ethan A Merritt, <<a href=3D"ma= ilto:[email protected]" target=3D"_blank">[email protected]</a>> wrote:<br></d= iv><blockquote type=3D"cite" style=3D"margin:0 0 0 .8ex; border-left:2px #7= 29fcf solid;padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr"><br></div><= br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed,= Sep 10, 2025 at 11:35=E2=80=AFAM Juh=C3=A1sz P=C3=A9ter <<a href=3D"mai= lto:[email protected]" rel=3D"noreferrer" target=3D"_blank">peter.ju= [email protected]</a>> wrote:</div><blockquote type=3D"cite" style=3D"mar= gin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div><div><= div><br></div><div>The error message means that the certificate required to= serve the site over HTTPS is not valid for the domain name <a href=3D"http= s://urldefense.com/v3/__http://gnuplot.info__;!!K-Hz7m0Vt54!koofFjCmBlGlxmt= OCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl4ZSgERWeODc4D2Pme$"= rel=3D"noreferrer" target=3D"_blank">gnuplot.info</a> (nor <a href=3D"http= s://urldefense.com/v3/__http://www.gnuplot.info__;!!K-Hz7m0Vt54!hZAtTCSEA3U= ZsTRDYd1Rlg-J8_Oq7DJZg-cJMaMoMBMcyZx3lwvCVqHE401p-ZikRUWZruc71FaDNhZkYYE3tw= 4$" rel=3D"noreferrer" target=3D"_blank">www.gnuplot.info</a>). If you look= at the certificate (offered by Firefox next to the error message), you can= see that it was issued by Let's Encrypt to <a href=3D"https://urldefense.c= om/v3/__http://secureprojects.sourceforge.net__;!!K-Hz7m0Vt54!koofFjCmBlGlx= mtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl4ZSgERWeODadFrph0= $" rel=3D"noreferrer" target=3D"_blank">secureprojects.sourceforge.net</a>,= and it is valid for a large selection of other domain names, presumably al= l projects hosted by SF. </div></div></div><br></blockquote><div><br></div>= <div>Thank you for your insights.</div><div><br></div><div>I think you are = addressing a different issue - whether the connection protocol is https or = http.</div></div></div></blockquote></div></div><div dir=3D"auto"><br></div= ><div dir=3D"auto">Yes, this is not about DNS failure. I don't experience D= NS failure, but see precisely the same errors/issues as Peter described.</d= iv><div dir=3D"auto"><br></div><div dir=3D"auto">(Nowadays http should actu= ally redirect to https. Modern browsers also refuse to show http pages.)</d= iv><div dir=3D"auto"><br></div><div dir=3D"auto"><div class=3D"gmail_quote"= ><blockquote type=3D"cite" style=3D"margin:0 0 0 .8ex; border-left:2px #729= fcf solid;padding-left:1ex"><div dir=3D"ltr"><div class=3D"gmail_quote"><di= v> It is not surprising that a certificate issued to SourceForge would not = mention <a href=3D"https://urldefense.com/v3/__http://gnuplot.info__;!!K-Hz= 7m0Vt54!koofFjCmBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9= wWKl4ZSgERWeODc4D2Pme$" rel=3D"noreferrer" target=3D"_blank">gnuplot.info</= a> by name because that name is not connected to SourceForge except in that= (as I understand it) it currently redirects queries to the actual gnuplot = site <a href=3D"https://urldefense.com/v3/__http://gnuplot.sourceforge.net_= _;!!K-Hz7m0Vt54!koofFjCmBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq= -e-_jCe9wWKl4ZSgERWeODckxZJT_$" rel=3D"noreferrer" target=3D"_blank">gnuplo= t.sourceforge.net</a>.</div></div></div></blockquote></div></div><div dir= =3D"auto"><br></div><div dir=3D"auto">Except that it does matter for https.= The hosting site needs to know that the certificate should also be for <a = href=3D"https://urldefense.com/v3/__http://gnuplot.info__;!!K-Hz7m0Vt54!koo= fFjCmBlGlxmtOCelbImz1v5loEhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl4ZSgERW= eODc4D2Pme$" target=3D"_blank">gnuplot.info</a> and it needs to be ex= plicit whether that is with or without www (or both).</div><div dir=3D"auto= ">Either a separate certificate is needed for that, or the certificate used= needs to be made aware that it needs to cover <a href=3D"https://urldefens= e.com/v3/__http://gnuplot.info__;!!K-Hz7m0Vt54!koofFjCmBlGlxmtOCelbImz1v5lo= EhcR-xo6w0JLq8fvwUwklPYjMJSMeOq-e-_jCe9wWKl4ZSgERWeODc4D2Pme$" target=3D"_b= lank">gnuplot.info</a>. This really needs to be fixed on the hosting site, = and usually the person in charge of the DNS is also needed in the process o= f making it work.</div><div dir=3D"auto"><br></div><div dir=3D"auto">Unless= the administrators of gnuplot on SF have access to certificate settings (m= eans you would also need to create and extend your own certificate), then S= F support is really needed here to set it up. </div><div dir=3D"auto">= <br></div><div dir=3D"auto"><div class=3D"gmail_quote"><blockquote type=3D"= cite" style=3D"margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-lef= t:1ex"><div dir=3D"ltr"><div class=3D"gmail_quote"><div> The current proble= m seems to be that the redirection itself fails in some cases, or fails to = pass through sufficient information</div></div></div></blockquote></div></d= iv><div dir=3D"auto"><br></div><div dir=3D"auto">No. It's really a misconfi= gured site/certificate.</div><div dir=3D"auto"><br></div><div dir=3D"auto">= > You still see the site, correct?</div><div dir=3D"auto"><br></div><div= dir=3D"auto">Well ... yes and no, but the more correct answer is probably = NO. By default you don't see the site because the web browser is protecting= you from "the malicious site" until you approve an exception and security = risk, but that is "an advanced use" (it is on purpose made difficult to do = that).</div><div dir=3D"auto"><br></div><div dir=3D"auto"><div class=3D"gma= il_quote"><blockquote type=3D"cite" style=3D"margin:0 0 0 .8ex; border-left= :2px #729fcf solid;padding-left:1ex"><div dir=3D"ltr"><div class=3D"gmail_q= uote"><div>For completeness I should mention that the issue of connection v= ia IPv6 as opposed to IPv4 was raised earlier, and might be relevant,</div>= </div></div></blockquote></div></div><div dir=3D"auto"><br></div><div dir= =3D"auto">It is possible that the site works correctly on IPv4 and fails wi= th IPv6. My network right now doesn't support IPv6, so it's hard for me to = check. It is unrelated to certificate issues, but it could hypothetically e= xplain why DNS works for others and not for you if you have IPv6. (By corre= ctly I mean resolving to the correct website. It still doesn't serve a comp= liant certificate.)</div><div dir=3D"auto"><br></div><div dir=3D"auto">Mojc= a</div><div dir=3D"auto"><div class=3D"gmail_quote"><blockquote type=3D"cit= e" style=3D"margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1= ex"></blockquote></div></div></div></div></blockquote></div><div><br clear= =3D"all"></div><div><br></div><div><span class=3D"gmail_signature_prefix">-= - </span><br></div><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"l= tr"><span style=3D"font-family:monospace"><span style=3D"color:rgb(0,0,0)">= Ethan A Merritt</span><br>Department of Biochemistry<br>University of Washi= ngton, Seattle<br><br></span></div></div><div>_____________________________= __________________<br></div><div>gnuplot-beta mailing list<br></div><div><a= href=3D"mailto:[email protected]">[email protected]= ceforge.net</a><br></div><div>Membership management via: <a href=3D"https:/= /lists.sourceforge.net/lists/listinfo/gnuplot-beta">https://lists.sourcefor= ge.net/lists/listinfo/gnuplot-beta</a><br></div></blockquote><div><br></div= ><div><span></span></div></body></html> --=-mflFnU5F+hWU02hOlK/q-- --===============4260535816465745620== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============4260535816465745620== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ gnuplot-beta mailing list [email protected] Membership management via: https://lists.sourceforge.net/lists/listinfo/gnuplot-beta --===============4260535816465745620==--