Re: [thredds] expired certificate on thredds.ucar.edu

• To: "Schumacher,Russ" <Russ.Schumacher@xxxxxxxxxxxxx>, "thredds@xxxxxxxxxxxxxxxx" <thredds@xxxxxxxxxxxxxxxx>
• Subject: Re: [thredds] expired certificate on thredds.ucar.edu
• From: David Robertson <robertson@xxxxxxxxxxxxxxxxxx>
• Date: Mon, 1 Jun 2020 16:59:19 +0000
• Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=marine.rutgers.edu; dmarc=pass action=none header.from=marine.rutgers.edu; dkim=pass header.d=marine.rutgers.edu; arc=none
• Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bSphsGbvFfmIPx/N+WuPcMoGAekXhrtwhB4w7p9L9yQ=; b=Rnk9OSSbezgY2ATDSkOtTu6wexT+raHb1G8jS4hZ9SnI5qFMrdWyt+BzhUh6OMkuMP5j6ogdA4qhbEW7lds1u86kmsSeWJQ5bTZeCwOCzHib1Os/fk5YmnLtXjny9zRFjZY/RvkFNwm8POpk/bna9GVVEmy4QPPS5SVpIjJPtZllVbvleKnG4mtxIUo04cZKad211sUOs+i4snwai3FlyqyQzzg4SLzgTi4X8YMWgLO+Nv6G0aSoFY6RSNPr9KvdRkEyvMFnZpOkyQNLPNWq/Gnx2q6ugK5BL6+2ZbfdLQChiP9w/653eFVEiMu6+y3MUCN9AGtoZMvVc2E2NB8eOQ==
• Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d3WSxJ6GEDTSVQpitvxi1SKbvWx7cPsFct/Ml51sKfsJKMlUsOJLWmd6A0nnUvgEFO+yYJZV72yEZPDmKdGqPGBy0Yb8ziY4kIiwwFd8wh6k6TulXdYeVhD6M82LqEk5PEaooIk1BWTDTdHSX/QXbTEO6qS7xQFH3kw/xjTczMoeO21pVK6vpxb0nDfP94QGuEUtQbtfFrJSEo66a772BYCIeJjwO/Mdpe5iypfKVOAkVajorqVWJrfBqpbpxXq+orrwKNmCfX1joLL0570XIXueA7rT2L9PtlLmPjSymgmuxmVSb63at+iF0Hb4Ldsl3nZ6sA1jY3iwv3HyOsNyIw==
• Authentication-results: colostate.edu; dkim=none (message not signed) header.d=none;colostate.edu; dmarc=none action=none header.from=marine.rutgers.edu;

Hi Russ,

This is probably aimed more at the admins for the thredds ucar instance.

Same thing happened to some services on our computers (LDAP, SVN, GIT, etc.) 
but browsers seem unaffected. Our solution was to download a new intermediate 
cert package from incommon. We still don’t know what was expired that that has 
fixed all our issues so far.

Dave


From: thredds <thredds-bounces@xxxxxxxxxxxxxxxx> on behalf of "Schumacher,Russ" 
<Russ.Schumacher@xxxxxxxxxxxxx>
Date: Monday, June 1, 2020 at 12:44 PM
To: "thredds@xxxxxxxxxxxxxxxx" <thredds@xxxxxxxxxxxxxxxx>
Subject: [thredds] expired certificate on thredds.ucar.edu

Hi all,

Not sure if this is the right list to use, but I noticed that some of my 
scripts that use wget to pull data from threddsrc.ucar.edu (using NCSS) started 
throwing errors like this over the weekend (this uses threddsrc, but I also got 
the same error with thredds.ucar.edu)

--2020-06-01 16:38:58--  
https://threddsrc.ucar.edu/thredds/ncss/grib/NCEP/GFS/Global_0p5deg/GFS_Global_0p5deg_20200601_0000.grib2/GC?var=Temperature_height_above_ground&vertCoord=2.0&latitude=40.5547&longitude=-105.1313&time_start=2020-06-01T00&time_duration=P3D&vertCoord=&accept=csv&point=true
Resolving threddsrc.ucar.edu (threddsrc.ucar.edu)... 128.117.12.33
Connecting to threddsrc.ucar.edu (threddsrc.ucar.edu)|128.117.12.33|:443... 
connected.
ERROR: The certificate of ‘threddsrc.ucar.edu’ is not trusted.
ERROR: The certificate of ‘threddsrc.ucar.edu’ has expired.

Any suggestions for how to resolve this would be appreciated – thanks much!

Russ




—
Russ S. Schumacher
Director, Colorado Climate Center
Colorado State Climatologist
Associate Professor, Department of Atmospheric Science
Colorado State University
e-mail: russ.schumacher@xxxxxxxxxxxxx<mailto:russ.schumacher@xxxxxxxxxxxxx>
phone: 970.491.8084
web: https://www.atmos.colostate.edu/people/faculty/schumacher/

• Follow-Ups:
  • Re: [thredds] expired certificate on thredds.ucar.edu
    • From: Jennifer Oxelson Ganter