Welcome to the LimeSurvey Community Forum

Ask the community, share ideas, and connect with other LimeSurvey users!

Status of ComfortUpdate server

  • jelo
  • jelo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
5 years 2 months ago #179590 by jelo
Status of ComfortUpdate server was created by jelo
Is there a way to find out, what status the ComfortUpdate server have.

A status page and FAQ would help to sort out issues early.
What hosts/IP are active and in use?
What IP and ports are used to communicate?

Currently there seems to be a maintenance going on.

Error!

No server answer

It seems that the ComfortUpdate server is not responding. Please try again in few minutes or contact the LimeSurvey team


Is there something like status.limesurvey.org ?

If I get the config data right, the communication is to these servers. And transport encryption is disable encryption?
Code:
$config['updaterversion'] = 8;
$config['comfort_update_server_url'] = 'comfortupdate.limesurvey.org/';
//$config['comfort_update_server_url'] = 'web.comfortupdate.org/';
$config['comfort_update_server_ssl'] = 0;
github.com/LimeSurvey/LimeSurvey/blob/26.../updater_version.php

Code:
$server_ssl = Yii::app()->getConfig("comfort_update_server_ssl");
        if ($server_ssl === 1) {
            if (extension_loaded("openssl")) {
                return 'https://';
            }
        }
        return 'http://';
    }


Accessing comfortupdate.limesurvey.org/ via https:// seems to be up.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.
  • LouisGac
  • LouisGac's Avatar
  • Visitor
  • Visitor
5 years 2 months ago #179617 by LouisGac
Replied by LouisGac on topic Status of ComfortUpdate server
yes sorry, we're working on it right now (problem with the new server and PHP 7.2)
The topic has been locked.
  • LouisGac
  • LouisGac's Avatar
  • Visitor
  • Visitor
5 years 2 months ago #179625 by LouisGac
Replied by LouisGac on topic Status of ComfortUpdate server
up and runing again
The topic has been locked.
  • DenisChenu
  • DenisChenu's Avatar
  • Offline
  • LimeSurvey Community Team
  • LimeSurvey Community Team
More
5 years 2 months ago #179626 by DenisChenu
Replied by DenisChenu on topic Status of ComfortUpdate server
Set ssl to false by defaut seems to be an issue.

Set ssl to 1 in github.com/LimeSurvey/LimeSurvey/blob/ma.../updater_version.php and disable ssl if ssl is not availeble in server (and send a warning).

Without ssl : any body can set any code on server when updating …

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development .
I don't answer to private message.
The topic has been locked.
  • jelo
  • jelo's Avatar Topic Author
  • Offline
  • Platinum Member
  • Platinum Member
More
5 years 2 months ago #179630 by jelo
Replied by jelo on topic Status of ComfortUpdate server

DenisChenu wrote: Without ssl : any body can set any code on server when updating …

Since the downloaded packages are not signed in a cryptographic way and checked before installation, the http update is a nice attack vector.

The meaning of the word "stable" for users
www.limesurvey.org/forum/development/117...ord-stable-for-users
The following user(s) said Thank You: DenisChenu
The topic has been locked.

Lime-years ahead

Online-surveys for every purse and purpose