URL of CSSI Space Weather data invalid in orekit-data-master

Orekit usage
1

Hi everyone,

The retrieval of the CSSI space weather doesn’t work anymore, the ftp:// URL is apparently no longer active (I get a 530 error when running the curl manually). The protocol in the URL now needs to be https://.

Cheers,
Clément

2

I will fix this.
It is weird they did not even switch to https…

3

Fixed, thanks for the report!

By the way, I used http, not https because curl returned the following error with https:

curl: (60) server verification failed: certificate signer not trusted. (CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none)
4

I have just filled in a contact form on the AGI website with the following message:

This is a message for your IT service. There is an issue with the TLS certificates chain provided by your server https://ftp.agi.com

$ curl https://ftp.agi.com/pub/DynamicEarthData/SpaceWeather-All-v1.2.txt
curl: (60) server verification failed: certificate signer not trusted. (CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none)
More details here: curl - SSL CA Certificates
curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above.

It seems that the second certificate in the chain is not that of the operational CA that signed the server’s TLS certificate:

  1. Issuer of the first certificat : DigiCert Global G2 TLS RSA SHA256 2020 CA1
  2. Subject du second certificat : DigiCert TLS RSA SHA256 2020 CA1

A test with the Firefox browser is successful, as this browser embeds its own CA certificate set, which contains the missing CA certificate. This is not the case with the CA certificate package supplied with a GNU/Linux system, which is used by most low-level tools (curl, wget, openssl…).

Could you fix this issue?

Thanks in advance

2 Likes