OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

Messages By Date: members message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Upcoming OASIS website downtime June 2-3


In order to improve website security, the OASIS website will be offline beginning at 6:00 PM EDT Saturday, June 2.  The site will remain offline through Sunday June 3.

 

As part of the upgrade, OASIS sites that accept member passwords will be secured with SSL/TLS.   Specific sites affected are:

· www.oasis-open.org

· tools.oasis-open.org (JIRA, Subversion)

· wiki.oasis-open.org

· lists.oasis-open.org


After the upgrade, all requests to the formerly insecure (http://) versions of these sites will be redirected to secure sites.  For instance, all requests to http://www.oasis-open.org/...  will be redirected to https://www.oasis-open.org/... .


In addition to the obvious security improvement these changes deliver to all members, there are two impact areas some members will need to be aware of:

 

1. New Security Warning messages while browsing the OASIS website:

 

Details vary among browser products but most browsers can be configured to provide warnings when a user browses from a secure site (https://) to an insecure site (http://) and vice versa.  Users with browser configurations that provide such warnings will begin to see them when browsing the affected OASIS sites.  

 

Browsers provide "mixed content" warnings when a page loaded from a secure site loads certain resources (e.g. _javascript_, css) over an insecure connection. Users who see such warnings when browsing the affected OASIS sites after the upgrade should clear their browser cache.  Check the documentation for your particular browser for details.

 

2. Broken working copies of SVN version controlled documents

 

After the upgrade, working copies of TC subversion repositories created using repository URLs of the form http://tools.oasis-open.org/version-control/svn/<tc-abbrevation>/... will no longer function properly.    Subversion commands invoked in such working copies will result in the following error message.

 

svn: Repository moved temporarily to 'https://tools.oasis-open.org/version-control/svn/<tc-abbrevation>/... please relocate

 

To "relocate" an existing working copy, execute the following Subversion command 

 

svn switch --relocate http https

 

Note that this command can be invoked from any directory in  a working copy directory tree but the https "relocation"  is performed  only on that directory and  any subdirectories, therefore it  is recommended to invoke this command once from the top-level directory of a working copy. 


Regards,


   -greg


--
Greg Carpenter
Director of Technology
greg.carpenter@oasis-open.org

Follow OASIS on:
 LinkedIn:    http://linkd.in/OASISopen
 Twitter:        http://twitter.com/OASISopen
 Facebook:  http://facebook.com/oasis.open


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]