Julia: Serving website and docs over HTTPS

[djsegal]

https://docs.julialang.org/en/stable/ returns NET::ERR_CERT_COMMON_NAME_INVALID on chrome

this is because ssl token is invalid/outdated

[sbromberger]

It's a hostname mismatch according to Safari:

[tkelman]

did this ever work over https, or is this just https://github.com/isaacs/github/issues/156 ?

[ViralBShah]

This probably worked when we used to use readthedocs.org. Now the docs are hosted on github pages, making this the same issue as above.

[ViralBShah]

closing as dup of isaacs/github#156

[ViralBShah]

Non-ssl works. http://docs.julialang.org/en/stable/

[StefanKarpinski]

I'm going to reopen this as a thing we need to fix, rather than waiting for GitHub to provide a solution. I believe @staticfloat is looking into options.

[yuyichao]

It only affects custom domain.

[StefanKarpinski]

Which is what we use.

[TotalVerb]

An easy way to "fix" this is to use CloudFlare, which will allow replacing the GitHub certificate with its own.

[staticfloat]

We've now got things setup through Fastly, so https://julialang.org should now work, modulo DNS caching.

[djsegal]

Wasn't this always about https://docs.julialang.org not working?

[staticfloat]

Docs is also an objective, we'll get to work on that in the near future.

[StefanKarpinski]

Wasn't this always about https://docs.julialang.org not working?

I broadened the scope because they're fundamentally the same issue. Might as well start with the main webpage.

[djsegal]

My bad. Didn't edit my answer. That makes a lot of sense. Thanks for working on it

[staticfloat]

I'm happy to report that this issue is now completely resolved, pending DNS propagation.

[djsegal]

Sorry to reopen this, but I found out pkg.julialang.org is not covered by this yet.

---

How I found out:

• Got the following error when trying to load a badge on my website:

QuantumOptics:1 Mixed Content: The page at 'https://juliaobserver.com/packages/QuantumOptics' was loaded over HTTPS, but requested an insecure image 'http://pkg.julialang.org/badges/QuantumOptics_0.4.svg'. This content should also be served over HTTPS.

• Decided to try to regex swap out http and https:

https://pkg.julialang.org/badges/QuantumOptics_0.4.svg

• Then got the following error (after navigating through Chrome:

Attackers might be trying to steal your information from pkg.julialang.org (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID

[tkelman]

guess that needs to be addressed at https://github.com/JuliaCI/pkg.julialang.org (and maybe also on fastly?), but not sure how

[staticfloat]

This is a good point. Looks like it's being served through GitHub, so we can do the same fastly trick as with docs.julialang.org. I'll get on this today.

[staticfloat]

Alright, it's setup, we just need to get DNS switched over and wait for it to propagate. In the meantime, you can test by setting 151.101.2.49 pkg.julialang.org in your /etc/hosts file.

[staticfloat]

DNS has been switched over, we're just waiting for it to propagate now.