[NeXus-committee] Fortinet has blocked www.nexusformat.org

Tue May 31 18:11:29 BST 2022

Hmm … OK I’ve adjusted the configuration slightly, does that work any better?

Freddie

From: Raymond Osborn <rayosborn at me.com>
Sent: 31 May 2022 16:28
To: Akeroyd, Freddie (STFC,RAL,ISIS) <freddie.akeroyd at stfc.ac.uk>; Freddie Akeroyd - STFC UKRI via NeXus-committee <nexus-committee at shadow.nd.rl.ac.uk>
Cc: Benjamin Watts <benjamin.watts at psi.ch>; NeXus Committee <NeXus-committee at nexusformat.org>
Subject: Re: [NeXus-committee] Fortinet has blocked www.nexusformat.org

If I attempt to access https://nexusformat.org/, I get the following warning, at least when connecting from Argonne.

[cid:image001.png at 01D87519.D8D96E30]

The problem does not seem to occur if I access the non-encrypted version, i.e., http://nexusformat.org/.

Ray

On May 31, 2022, at 9:56 AM, Freddie Akeroyd - STFC UKRI via NeXus-committee <nexus-committee at shadow.nd.rl.ac.uk<mailto:nexus-committee at shadow.nd.rl.ac.uk>> wrote:

Hi Ben,

www.nexusformat.org<http://www.nexusformat.org/>   is a DNS canonical name for nexusformat.github.io<http://nexusformat.github.io/> as you found. We look after the server for nexusformat.org<http://nexusformat.org/> and it just does a redirect to www.nexusformat.org<http://www.nexusformat.org/>. which seems to be OK on non-work machines I have tried (my work machines get the same issue as Peter). The server does do virtual hosting of several site, so relies on the http header to know which site to serve (and would probably return what you see if it couldn’t work that out). Is anybody else having issues with https://nexusformat.org/ not redirecting?

Freddie

From: NeXus-committee <nexus-committee-bounces at shadow.nd.rl.ac.uk<mailto:nexus-committee-bounces at shadow.nd.rl.ac.uk>> On Behalf Of Watts Benjamin (PSI) via NeXus-committee
Sent: 31 May 2022 15:42
To: NeXus-committee at nexusformat.org<mailto:NeXus-committee at nexusformat.org>
Subject: Re: [NeXus-committee] Fortinet has blocked www.nexusformat.org<http://www.nexusformat.org/>

Hi Peter,
   I think Freddie and Pete tend to know the most about the web page. I can visit https://www.nexusformat.org<https://www.nexusformat.org/> just fine, but https://nexusformat.org<https://nexusformat.org/> brings up a bunch of warnings and a "Fedora Webserver Test Page".
DNSchecker says that the www version belongs to Github, but the non-www version belongs to Nick Moore at the Science and Technology Facilites Council: Rutherford Appleton Laboratory. Perhaps you can ask Nick Moore what is going on?

I feel flattered that Fortinet recognised just how exciting our work is when they chose which category to put it in.

Cheers,
Ben
________________________________
From: NeXus-committee <nexus-committee-bounces at shadow.nd.rl.ac.uk<mailto:nexus-committee-bounces at shadow.nd.rl.ac.uk>> on behalf of Chang, Peter (DLSLtd, RAL, LSCI) via NeXus-committee <nexus-committee at shadow.nd.rl.ac.uk<mailto:nexus-committee at shadow.nd.rl.ac.uk>>
Sent: Tuesday, 31 May 2022 2:52:51 PM
To: NeXus-committee at nexusformat.org<mailto:NeXus-committee at nexusformat.org>
Subject: [NeXus-committee] Fortinet has blocked www.nexusformat.org<http://www.nexusformat.org/>

Hi all,

The SSL certificate seems dodgy according to firefox:

From home broadband:

nexusformat.org<http://nexusformat.org/> uses an invalid security certificate.

The certificate is not trusted because it is self-signed.

Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

From Diamond network (so Janet):

Someone could be trying to impersonate the site and you should not continue.

Web sites prove their identity via certificates. Firefox does not trust www.nexusformat.org<http://www.nexusformat.org/> because its certificate issuer is unknown, the certificate is self-signed, or the server is not sending the correct intermediate certificates.

Error code: SEC_ERROR_UNKNOWN_ISSUER

Has the DNS entry for nexusformat.org<http://nexusformat.org/> been hijacked? Clicking through at home sees the usual site but from work I see:
<image001.png>

Who’s in charge of the domain name?

Best regards,
Peter

--
This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd.
Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom

This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses.
_______________________________________________
NeXus-committee mailing list
NeXus-committee at nexusformat.org<mailto:NeXus-committee at nexusformat.org>
https://lists.nexusformat.org/mailman/listinfo/nexus-committee

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.nexusformat.org/pipermail/nexus-committee/attachments/20220531/6c54da67/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 25947 bytes
Desc: image001.png
URL: <https://lists.nexusformat.org/pipermail/nexus-committee/attachments/20220531/6c54da67/attachment.png>