Earthquakes website down?

L

LadyMud

Active member
Seems to be working for me (I think).
Updated at 8:10am today, with most recent event on Feb 19 at Loch Arienas.
Or is something missing, from the past four days?
 
alanw

alanw

Well-known member
They have a problem with their TLS certificate. The http:// site works:

Earthquakes around the British Isles in the last 60 days

The British Geological Survey provides up-to-date information on recent and historical earthquakes, educational resources, and seismic hazard services
www.earthquakes.bgs.ac.uk

But if you have visited the site previously, HTTP Strict Transport Security could prevent you from accessing it, with a message about security. This *might* be fixable by using your browser's "forget about this site" option in the brower's history.

1677149408638.png


Code: 
* Server certificate:
*  subject: C=GB; ST=Wiltshire; O=UK Research and Innovation; CN=*.bgs.ac.uk
*  start date: Nov  9 00:00:00 2022 GMT
*  expire date: Nov  9 23:59:59 2023 GMT
*  subjectAltName does not match www.earthquakes.bgs.ac.uk
* SSL: no alternative certificate subject name matches target host name 'www.earthquakes.bgs.ac.uk'

Code: 
curl -v https://www.earthquakes.bgs.ac.uk/
openssl s_client -connect www.earthquakes.bgs.ac.uk:443
openssl x509 -noout -text
Code: 
            X509v3 Subject Alternative Name: 
                DNS:*.bgs.ac.uk, DNS:bgs.ac.uk

The certificate hasn't changed for several months, I can't yet (still only 1/4 through my morning coffee, and I haven't done this sort of thing professionally for years) see what might be wrong with the SAN.
 
Pitlamp

Pitlamp

Well-known member
Thanks Alan - that's very helpful. I'll try the alternative way in.

Please don't go to any further trouble just on my account!
 
Pitlamp

Pitlamp

Well-known member
It works! But then again clicking on the original link in my favoutites was then found to work, so maybe they've fixed it?

Anyway, thanks.
 
alanw

alanw

Well-known member
Pitlamp said:
Please don't go to any further trouble just on my account!
Click to expand...
It's no problem, I've plenty of time on my hands and I'm actually interested in this sort of thing. Coffee is now consumed, and here's the answer:


Code: 
Names may contain the wildcard
character * which is considered to match any single domain name
component or component fragment. E.g., *.a.com matches foo.a.com but
not bar.foo.a.com. f*.com matches foo.com but not bar.com.

So "*.bgs.ac.uk" doesn't match "www.earthquakes.bgs.ac.uk", but would match https://earthquakes.bgs.ac.uk/

So there's a solution, use the above URL without www. at the start.

So the question is: what has changed recently? And to that I haven't a clue.
 
You must log in or register to reply here.
Top