- Posts: 5033
- Thank you received: 1257
Welcome to the LimeSurvey Community Forum
Ask the community, share ideas, and connect with other LimeSurvey users!
Status of ComfortUpdate server
- jelo
- Topic Author
- Offline
- Platinum Member
Less
More
5 years 3 months ago #179590
by jelo
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Status of ComfortUpdate server was created by jelo
Is there a way to find out, what status the ComfortUpdate server have.
A status page and FAQ would help to sort out issues early.
What hosts/IP are active and in use?
What IP and ports are used to communicate?
Currently there seems to be a maintenance going on.
Is there something like status.limesurvey.org ?
If I get the config data right, the communication is to these servers. And transport encryption is disable encryption?
github.com/LimeSurvey/LimeSurvey/blob/26.../updater_version.php
Accessing comfortupdate.limesurvey.org/ via https:// seems to be up.
A status page and FAQ would help to sort out issues early.
What hosts/IP are active and in use?
What IP and ports are used to communicate?
Currently there seems to be a maintenance going on.
Error!
No server answer
It seems that the ComfortUpdate server is not responding. Please try again in few minutes or contact the LimeSurvey team
Is there something like status.limesurvey.org ?
If I get the config data right, the communication is to these servers. And transport encryption is disable encryption?
Code:
$config['updaterversion'] = 8; $config['comfort_update_server_url'] = 'comfortupdate.limesurvey.org/'; //$config['comfort_update_server_url'] = 'web.comfortupdate.org/'; $config['comfort_update_server_ssl'] = 0;
Code:
$server_ssl = Yii::app()->getConfig("comfort_update_server_ssl"); if ($server_ssl === 1) { if (extension_loaded("openssl")) { return 'https://'; } } return 'http://'; }
Accessing comfortupdate.limesurvey.org/ via https:// seems to be up.
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.
- LouisGac
- Visitor
5 years 3 months ago #179617
by LouisGac
Replied by LouisGac on topic Status of ComfortUpdate server
yes sorry, we're working on it right now (problem with the new server and PHP 7.2)
The topic has been locked.
- LouisGac
- Visitor
5 years 3 months ago #179625
by LouisGac
Replied by LouisGac on topic Status of ComfortUpdate server
up and runing again
The topic has been locked.
- DenisChenu
- Offline
- LimeSurvey Community Team
Less
More
- Posts: 13643
- Thank you received: 2491
5 years 3 months ago #179626
by DenisChenu
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
Replied by DenisChenu on topic Status of ComfortUpdate server
Set ssl to false by defaut seems to be an issue.
Set ssl to 1 in github.com/LimeSurvey/LimeSurvey/blob/ma.../updater_version.php and disable ssl if ssl is not availeble in server (and send a warning).
Without ssl : any body can set any code on server when updating …
Set ssl to 1 in github.com/LimeSurvey/LimeSurvey/blob/ma.../updater_version.php and disable ssl if ssl is not availeble in server (and send a warning).
Without ssl : any body can set any code on server when updating …
Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
- jelo
- Topic Author
- Offline
- Platinum Member
Less
More
- Posts: 5033
- Thank you received: 1257
5 years 3 months ago #179630
by jelo
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
Replied by jelo on topic Status of ComfortUpdate server
Since the downloaded packages are not signed in a cryptographic way and checked before installation, the http update is a nice attack vector.DenisChenu wrote: Without ssl : any body can set any code on server when updating …
The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.