search

andrewthong / covid19tracker-api

API backend for COVID-19 Tracker Canada project
https://api.covid19tracker.ca/
MIT License
37 stars 5 forks source link

Cannot connect to https://api.covid19tracker.ca since Oct 1 #94

Closed sanjayvsingh closed 2 years ago

sanjayvsingh commented 2 years ago

Hello, thank you for making your API public. This is a very useful service. I have a Perl script that has been successfully making calls to the API, like https://api.covid19tracker.ca/regions, through the summer. On Oct 1 (between Sep 30 7a and Oct 1 7a EST), it stopped working. The error message is Can\'t connect to api.covid19tracker.ca:443.

I can access the API directly in my browser and I can connect to other SSL APIs from Perl without issue. Do you know if you made a proxy or firewall change around this time that affects access? I used the following SSL tests against your site to hopefully see if there was an obvious connectivity issue. They show something, but I'm not sure what your next diagnostic steps may be.

I know there's not a lot to go on here, but am hoping that you're aware of a change on Oct 1 that could have affected connectivity. Thank you.

andrewthong commented 2 years ago

Hello. We have not made any changes to firewall or proxy recently. That Digicert test is showing that the DNS resolves on my end.

sanjayvsingh commented 2 years ago

Thank you. I see the Digicert test is working as well. I still can't connect, but it could be my older tech stack. Thanks for checking.

sanjayvsingh commented 2 years ago

I was able to fix the problem by disabling hostname verification with SSL. Your hostname matches the cert, so I don't get why that's the fix, but it's working now. Thank you for your help and again, thank you for making this data so easily available.

Reference: https://stackoverflow.com/a/36870587

sanjayvsingh commented 2 years ago

If you're really curious about the root cause of this problem... https://scotthelme.co.uk/lets-encrypt-root-expiration-post-mortem/