Australian Government’s Bureau of Meteorology Can’t Do HTTPS

Re:Australian Government’s Bureau of Meteorology Can’t Do HTTPS by globular-toast on Wednesday December 02, 2020 @07:01AM (#25275590)

At first I clicked and thought, so what? Then I got it and had a good chuckle.

Edit: looks like most readers don't get it either...

[ Parent | on HN ]

Re:Australian Government’s Bureau of Meteorology Can’t Do HTTPS by nickthemagicman on Wednesday December 02, 2020 @07:03AM (#25275600)

I didn't get it what am I missing?

[ Parent | on HN ]

Re:Australian Government’s Bureau of Meteorology Can’t Do HTTPS by petrosagg on Wednesday December 02, 2020 @07:08AM (#25275628)

The OP link is over https, which appears to work fine but only for redirecting you back to http

[ Parent | on HN ]

Re:Australian Government’s Bureau of Meteorology Can’t Do HTTPS by globular-toast on Wednesday December 02, 2020 @08:04AM (#25275938)

Check the output from curl. HTTPS is working but is merely redirecting to a page saying HTTPS is not working.

    $ curl -v https://www.bom.gov.au/
    *   Trying 104.78.177.116...
    * TCP_NODELAY set
    * Connected to www.bom.gov.au (104.78.177.116) port 443 (#0)
    * ALPN, offering h2
    * ALPN, offering http/1.1
    * successfully set certificate verify locations:
    *   CAfile: /etc/ssl/certs/ca-certificates.crt
      CApath: /etc/ssl/certs
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):
    * TLSv1.3 (IN), TLS handshake, Server hello (2):
    * TLSv1.2 (IN), TLS handshake, Certificate (11):
    * TLSv1.2 (IN), TLS handshake, Server key exchange (12):
    * TLSv1.2 (IN), TLS handshake, Server finished (14):
    * TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
    * TLSv1.2 (OUT), TLS change cipher, Client hello (1):
    * TLSv1.2 (OUT), TLS handshake, Finished (20):
    * TLSv1.2 (IN), TLS handshake, Finished (20):
    * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
    * ALPN, server accepted to use http/1.1
    * Server certificate:
    *  subject: C=AU; ST=VIC; L=Docklands; O=Bureau of Meteorology; CN=*.bom.gov.au
    *  start date: Jun 10 00:00:00 2020 GMT
    *  expire date: Sep  9 12:00:00 2021 GMT
    *  subjectAltName: host "www.bom.gov.au" matched cert's "*.bom.gov.au"
    *  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=GeoTrust RSA CA 2018
    *  SSL certificate verify ok.
    > GET / HTTP/1.1
    > Host: www.bom.gov.au
    > User-Agent: curl/7.58.0
    > Accept: */*
    > 
    < HTTP/1.1 307 Temporary Redirect
    < Server: AkamaiGHost
    < Content-Length: 0
    < Location: http://www.bom.gov.au/akamai/https-redirect.html
    < Date: Wed, 02 Dec 2020 13:03:03 GMT
    < Connection: keep-alive
    < Server-Timing: cdn-cache; desc=HIT
    < Server-Timing: edge; dur=1
    < 
    * Connection #0 to host www.bom.gov.au left intact

[ Parent | on HN ]

Re:Australian Government’s Bureau of Meteorology Can’t Do HTTPS by nickthemagicman on Wednesday December 02, 2020 @05:43PM (#25282758)

Ha that's rediculous. Thanks for letting me know.

[ Parent | on HN ]