Status of ComfortUpdate server

More
7 months 4 weeks ago #179590 by jelo
Is there a way to find out, what status the ComfortUpdate server have.

A status page and FAQ would help to sort out issues early.
What hosts/IP are active and in use?
What IP and ports are used to communicate?

Currently there seems to be a maintenance going on.

Error!

No server answer

It seems that the ComfortUpdate server is not responding. Please try again in few minutes or contact the LimeSurvey team


Is there something like status.limesurvey.org ?

If I get the config data right, the communication is to these servers. And transport encryption is disable encryption?
$config['updaterversion'] = 8;
$config['comfort_update_server_url'] = 'comfortupdate.limesurvey.org/';
//$config['comfort_update_server_url'] = 'web.comfortupdate.org/';
$config['comfort_update_server_ssl'] = 0;
github.com/LimeSurvey/LimeSurvey/blob/26.../updater_version.php

$server_ssl = Yii::app()->getConfig("comfort_update_server_ssl");
        if ($server_ssl === 1) {
            if (extension_loaded("openssl")) {
                return 'https://';
            }
        }
        return 'http://';
    }


Accessing comfortupdate.limesurvey.org/ via https:// seems to be up.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu

Please Log in or Create an account to join the conversation.

LimeSurvey Partners
More
7 months 4 weeks ago #179617 by LouisGac
yes sorry, we're working on it right now (problem with the new server and PHP 7.2)

Please Log in or Create an account to join the conversation.

More
7 months 3 weeks ago #179625 by LouisGac
up and runing again

Please Log in or Create an account to join the conversation.

More
7 months 3 weeks ago #179626 by DenisChenu
Set ssl to false by defaut seems to be an issue.

Set ssl to 1 in github.com/LimeSurvey/LimeSurvey/blob/ma.../updater_version.php and disable ssl if ssl is not availeble in server (and send a warning).

Without ssl : any body can set any code on server when updating …

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in or Create an account to join the conversation.

More
7 months 3 weeks ago #179630 by jelo
Replied by jelo on topic Status of ComfortUpdate server

DenisChenu wrote: Without ssl : any body can set any code on server when updating …

Since the downloaded packages are not signed in a cryptographic way and checked before installation, the http update is a nice attack vector.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu

Please Log in or Create an account to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!