search

TheJacksonLaboratory / hpo-web

a web application to search and navigate the Human Phenotype Ontology (HPO)
https://hpo.jax.org
Other
13 stars 12 forks source link

SSL error in API query #199

Closed bheavner closed 2 years ago

bheavner commented 2 years ago

When I attempt API queries on my mac laptop via macports curl or python 3.10.2, I get an SSL error:

curl -X GET "https://hpo.jax.org/api/hpo/term/HP%3A0001166" -H  "accept: application/json"
curl: (35) error:0A000152:SSL routines::unsafe legacy renegotiation disabled

SSLlabs reports "There is no support for secure renegotiation." for the hpo.jax.org site.

It is not clear to me whether this is an issue I should resolve on the client side by adjusting my SSL client/libraries, or if it's best resolved on the server side via an upgrade in the webserver.

bheavner commented 2 years ago

I can work around on the client side by enabling UnsafeLegacyRenegotiation in my openssl.cnf file (as described here) and then using the --insecure argument on curl, but of course disabling SSL functionality isn't my preferred solution.

iimpulse commented 2 years ago

Thanks @bheavner this has been reported a few times. We are planning to move this to the cloud soon so things should resolve. I'll leave this open and related to #197

iimpulse commented 2 years ago

@bheavner we got new certificates sorry for the very late resolution. But this should be working as expected now.