×

Notice

The forum is in read only mode.
× NOTE: You still must be a registered user to post here (this is necessary to prevent spammers from using this as an access point to the site). Any problem that prevents you from registering or logging in, please contact Kristin via email or using the front page news commenting system. Ideally by email.

KristinDarken ... no space at (@) this site's domain (whateleyacademy.net).

Question Can't access server from Fandom (the Wiki)

4 years 10 months ago #1 by XaltatunOfAcheron
  • XaltatunOfAcheron
  • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • At approximately 12:32 this afternoon Fandom (the Whateleyverse Wiki) stopped being able to access the Crystal Hall server at whateleyacademy.net. I have no problem accessing it directly. Safari on Mac OS, although I suspect that they've (that is Fandom) made a change to not access anything that isn't encrypted. Although it may be something else.

    I just tried to get to it from TvTropes, and it works there.
    4 years 10 months ago #3 by Sir Lee
    • Sir Lee
    • Sir Lee's Avatar


  • Posts: 3113

  • Gender: Male
  • Birthdate: 08 Nov 1966
  • The problem can be summarized as follows:
    Wikia/Fandom is converting all external links into https:// links, even if they are explicitly http:// links. However, whateleyacademy.net does not support https:// connections yet.

    The long and short of it is that the Web is moving towards https, and sites that don't support it are increasingly treated as second-class citizens. Browsers have been popping warnings about our unencrypted logon forms for a while now, and they might eventually disallow unencrypted passwords altogether (I think I read something a few months ago about this being already on Chrome's roadmap)

    Supporting https is a pain, but it appears that the pressure towards compliance is increasing.

    Don't call me "Shirley." You will surely make me surly.
    4 years 10 months ago #4 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • That's what I expected was going on.

    There are ways to do it in sort of a compatible way (check for https:// first, then the port 80 for http://) but either Fandom decided not to do that, or it decided that people had enough time to convert and removed the compatibility.
    4 years 10 months ago #5 by Malady
    • Malady
    • Malady's Avatar


  • Posts: 3893

  • Gender: Unknown
  • Birthdate: Unknown
  • But, why is it happening on "I Don't Think We're In Kansas Anymore", but doesn't happen on "The Evil That Men Do"?
    4 years 10 months ago #6 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Malady wrote: But, why is it happening on "I Don't Think We're In Kansas Anymore", but doesn't happen on "The Evil That Men Do"?


    As a retired software developer, I can give you an answer: Fandom's system is FUBAR. They're engaging in a total rewrite based on a current version of MediaWiki, it's so bad.

    With that kind of a mess, glitches are inevitable.
    4 years 10 months ago #7 by Sir Lee
    • Sir Lee
    • Sir Lee's Avatar


  • Posts: 3113

  • Gender: Male
  • Birthdate: 08 Nov 1966
  • It happens in "The Evil That Men Do" for me, too. There are any number of possible reasons for the inconsistency. Most likely, on a large site such as Fandom, we are seeing out-of-sync mirrors. Depending on where you are located and which particular page you are opening, you are directed to one server or another. I'm getting all pages (so far) from the "updated" servers, but Malady might still be getting a few pages from a server that is missing the latest updates.

    Don't call me "Shirley." You will surely make me surly.
    4 years 10 months ago #8 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Sir Lee wrote: It happens in "The Evil That Men Do" for me, too. There are any number of possible reasons for the inconsistency. Most likely, on a large site such as Fandom, we are seeing out-of-sync mirrors. Depending on where you are located and which particular page you are opening, you are directed to one server or another. I'm getting all pages (so far) from the "updated" servers, but Malady might still be getting a few pages from a server that is missing the latest updates.


    The Evil that Men Do is still going through OK for me, although that might be a locally cached copy.

    Just cleared history - it's still coming through fine.
    4 years 10 months ago - 4 years 10 months ago #9 by null0trooper
    • null0trooper
    • null0trooper's Avatar


  • Posts: 3032

  • Gender: Male
  • Birthdate: 19 Oct 1964
  • Malady wrote: But, why is it happening on "I Don't Think We're In Kansas Anymore", but doesn't happen on "The Evil That Men Do"?


    Because the links on the page for "The Evil That Men Do" haven't been "fixed" behind our backs for us yet.

    I.e., The urls are still http:, pointing to port 80 here, vs. https:, pointing to port 443.

    Forum-posted ideas are freely adoptable.

    WhatIF Stories: Buy the Book

    Discussion Thread
    Last Edit: 4 years 10 months ago by null0trooper.
    4 years 10 months ago #10 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • null0trooper wrote:

    Malady wrote: But, why is it happening on "I Don't Think We're In Kansas Anymore", but doesn't happen on "The Evil That Men Do"?


    Because the links on the page for "The Evil That Men Do" haven't been "fixed" behind our backs for us yet.

    I.e., The urls are still http:, pointing to port 80 here, vs. https:, pointing to port 443.


    I just took a look at Kansas, and all the links are http://, not https. They're doing something other than changing the text on the page. They're almost certainly changing it in flight somewhere in their software.
    4 years 10 months ago #11 by Kristin Darken
    • Kristin Darken
    • Kristin Darken's Avatar


  • Posts: 3898

  • Gender: Unknown
  • Birthdate: Unknown
  • If the internet wants us to shift to using https.... it needs to do a whole lot better about making that process doable without a full time Linux savvy administrator.

    Fate guard you and grant you a Light to brighten your Way.
    4 years 10 months ago #12 by Kettlekorn
    • Kettlekorn
    • Kettlekorn's Avatar


  • Posts: 1383

  • Gender: Unknown
  • Birthdate: Unknown
  • The internet is aware of that issue and has been working on solutions. In particular, letsencrypt.org and certbot.eff.org come to mind. The former is a free, automated certificate authority, and the latter is one of several client programs that can be run on a server to obtain and install a certificate from Let's Encrypt and then be put in a cron job to automatically update that certificate every couple months.

    I am the kernel that pops in the night. I am the pain that keeps your dentist employed.
    4 years 10 months ago #13 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Kettlekorn wrote: The internet is aware of that issue and has been working on solutions. In particular, letsencrypt.org and certbot.eff.org come to mind. The former is a free, automated certificate authority, and the latter is one of several client programs that can be run on a server to obtain and install a certificate from Let's Encrypt and then be put in a cron job to automatically update that certificate every couple months.


    Getting a certificate is the least of the problems. As you say, it's pretty straight-forward these days. It's the rest of the work that needs to be done that's the problem. That includes checking out the basic frameworks, plugins, configuration files and probably a host of other things I've probably never heard of and don't want to know. My last brush with system administration was on IBM mainframes in the 1970s, which is not particularly relevant to this problem.

    Kristen's comment about it requiring a full-time unix system administrator is not that far off the mark: the knowledge base needed to do the job efficiently is that of someone who has been a full-time unix system administrator. Otherwise it's by guess and by golly, and would take a lot longer and create a lot more frustration.
    4 years 10 months ago #14 by null0trooper
    • null0trooper
    • null0trooper's Avatar


  • Posts: 3032

  • Gender: Male
  • Birthdate: 19 Oct 1964
  • XaltatunOfAcheron wrote: Kristen's comment about it requiring a full-time unix system administrator is not that far off the mark: the knowledge base needed to do the job efficiently is that of someone who has been a full-time unix system administrator. Otherwise it's by guess and by golly, and would take a lot longer and create a lot more frustration.


    Not really. Installing the signed certificates (if the hosting company hasn't already taken care of that) to the correct directories and with the correct permissions may require root access.

    Opening port 443 inbound at the firewall likely also requires root access.

    Updating the web server's configuration to use SSL isn't as hard as you make it out to be - at least not for the Apache webserver. Once your configuration requires passing some of the requests through to helper/worker threads, and other fun stuff like orphaned software, then it can really take a while.

    Forum-posted ideas are freely adoptable.

    WhatIF Stories: Buy the Book

    Discussion Thread
    4 years 10 months ago #15 by Kristin Darken
    • Kristin Darken
    • Kristin Darken's Avatar


  • Posts: 3898

  • Gender: Unknown
  • Birthdate: Unknown
  • Please don't be dismissive of the difficulty in converting to https. If you have experience with doing so on a Google Cloud Compute Engine (virtual machine server) and you'd like to share your insight and walk me through to prove how easy it is, great. If not, please don't try to compare your experience having 'read about it' or having done this own your own personal physical server. It's not the same and the dismissiveness is insulting. If it were EASY, it would already be done. If it were even a little challenging but just needed some degree of research; I'd probably also have finished it by now. It is NOT simple and may actually not be doable without setting up an entirely new LAMP and migrating the site.

    Fate guard you and grant you a Light to brighten your Way.
    4 years 10 months ago #16 by Kettlekorn
    • Kettlekorn
    • Kettlekorn's Avatar


  • Posts: 1383

  • Gender: Unknown
  • Birthdate: Unknown
  • Sorry, I wasn't trying to be dismissive. I read the "us" in "If the internet wants us to shift to using https" as collectively applying to society as a whole, which made me think you might have missed some recent developments since https is now pretty easy in most cases. I didn't mean to imply that there aren't edge cases where it's still a pain in the ass or to suggest that we're not in one of those edge cases. I should've been more clear about that.

    I am the kernel that pops in the night. I am the pain that keeps your dentist employed.
    4 years 10 months ago #17 by null0trooper
    • null0trooper
    • null0trooper's Avatar


  • Posts: 3032

  • Gender: Male
  • Birthdate: 19 Oct 1964
  • I would have to agree that my trivial experience of fifteen years, give or take, as a web admin was not on a Google Cloud Compute Engine platform.

    Forum-posted ideas are freely adoptable.

    WhatIF Stories: Buy the Book

    Discussion Thread
    4 years 10 months ago #18 by Kristin Darken
    • Kristin Darken
    • Kristin Darken's Avatar


  • Posts: 3898

  • Gender: Unknown
  • Birthdate: Unknown
  • I think the key here is to remember that we aren't using a web hosting service. We're using a cloud server provider.

    Fate guard you and grant you a Light to brighten your Way.
    4 years 9 months ago #19 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Kristin Darken wrote: I think the key here is to remember that we aren't using a web hosting service. We're using a cloud server provider.


    There may be some light. I've got family members that work in systems administration for major IT service companies. I showed the problem to one of them, and he said: "hm, we've got some people who work with Google cloud compute engine. That's their job. I'll ask one of them if they've got a step-by-step for converting a site from http to https."

    We'll see if that bears usable fruit.
    4 years 9 months ago #20 by Kristin Darken
    • Kristin Darken
    • Kristin Darken's Avatar


  • Posts: 3898

  • Gender: Unknown
  • Birthdate: Unknown
  • Appreciate it. Even if nothing comes of it, it's worth having someone ask "do you have a" because it might prompt someone to write one, if it isn't already there (and I don't think it is, I've been digging for one).

    And just a reminder for those thinking "I thought Kristin WAS the administrator responsible for this" ... need to remember that, for example, we bring in $300 per month in donations to keep the site functioning compared to the $3000-5000 in upkeep and costs that BigCloset operates on. We are hugely thankful to those who ARE donating... especially because that allows us to do so without the need for advertisements and what limited revenue we get from those (and we get to keep more of it because I don't have to file donations as income like I did ad revenue)... but even on slow months, what's necessary to keep things running falls more on contributed effort than paid worker.

    I may be the admin here, but I'm plenty aware that my experience level is at that of a hobbyist... and that most of my 'hardcore' computer experience is woefully outdated (and targeted/specialized in areas other than IT admin).

    Fate guard you and grant you a Light to brighten your Way.
    4 years 9 months ago - 4 years 9 months ago #21 by Malady
    • Malady
    • Malady's Avatar


  • Posts: 3893

  • Gender: Unknown
  • Birthdate: Unknown
  • I wonder if this could be fixed with a text replacer that mods the Wiki's "external link" class, since, at a glance, that seems to be the problem.

    Firefox has FoxReplace that can do site specific text modding, but never used it much...

    Firefox can also do personal css, I think?
    Last Edit: 4 years 9 months ago by Malady.
    4 years 9 months ago #22 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Malady wrote: I wonder if this could be fixed with a text replacer that mods the Wiki's "external link" class, since, at a glance, that seems to be the problem.

    Firefox has FoxReplace that can do site specific text modding, but never used it much...

    Firefox can also do personal css, I think?


    This is intriguing. I didn't know that it had an "external link" class that could be changed on a per-wiki basis. Tell me more.
    4 years 9 months ago - 4 years 9 months ago #23 by Malady
    • Malady
    • Malady's Avatar


  • Posts: 3893

  • Gender: Unknown
  • Birthdate: Unknown
  • XaltatunOfAcheron wrote:

    Malady wrote: I wonder if this could be fixed with a text replacer that mods the Wiki's "external link" class, since, at a glance, that seems to be the problem.

    Firefox has FoxReplace that can do site specific text modding, but never used it much...

    Firefox can also do personal css, I think?


    This is intriguing. I didn't know that it had an "external link" class that could be changed on a per-wiki basis. Tell me more.


    And, as seen when you view-source a valid page, it's actually "external text"... Whoops.

    FoxReplace ( Code: Github ) gets me most of the way there, I just need to make it replace my actual HTML tags, instead of just bare text...

    Adding "crystalhall.wikia.com" makes it work on all of the Wiki, I just can't get it to change the tags, specifically... I could fork it and tweak, but have no add-on coding experience.
    Last Edit: 4 years 9 months ago by Malady.
    4 years 9 months ago #24 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • Malady wrote:

    XaltatunOfAcheron wrote:

    Malady wrote: I wonder if this could be fixed with a text replacer that mods the Wiki's "external link" class, since, at a glance, that seems to be the problem.

    Firefox has FoxReplace that can do site specific text modding, but never used it much...

    Firefox can also do personal css, I think?


    This is intriguing. I didn't know that it had an "external link" class that could be changed on a per-wiki basis. Tell me more.


    And, as seen when you view-source a valid page, it's actually "external text"... Whoops.

    FoxReplace ( Code: Github ) gets me most of the way there, I just need to make it replace my actual HTML tags, instead of just bare text...

    Adding "crystalhall.wikia.com" makes it work on all of the Wiki, I just can't get it to change the tags, specifically... I could fork it and tweak, but have no add-on coding experience.


    I don't know why you need to change the tags. The href= contains the URL. It appears that Fandom is simply deleting the "http:" part and leaving "//whateleyacademy.net/...." Then the browser takes its default when it doesn't see a scheme (which appears to be "https:") and away we go to "server not found".

    So replacing "//whateleyacademy.net" with " whateleyacademy.net " ought to work.

    Since I'm on Safari, I have to find a plugin that will do it for me; firefox plugins probably won't work well. Sigh.
    4 years 9 months ago #25 by null0trooper
    • null0trooper
    • null0trooper's Avatar


  • Posts: 3032

  • Gender: Male
  • Birthdate: 19 Oct 1964
  • For anyone using the Request Control add-on (FF), this will rewrite Crystal Hall URLs to use http:
    Warning: Spoiler! [ Click to expand ]

    Forum-posted ideas are freely adoptable.

    WhatIF Stories: Buy the Book

    Discussion Thread
    4 years 9 months ago - 4 years 9 months ago #26 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • It looks like Fandom backed the change out. I'm able to get to whateleyacademy.net from Fandom, and the page source looks like it's got the usual http:// prefix.

    OOPS - I may have been hasty. I can't get to Muse-Of-Krews, and the page source looks like the same. What might have happened is that I've been going over the same 15 pages, so the browser might have gotten them from the cache.

    I had some hopes....
    Last Edit: 4 years 9 months ago by XaltatunOfAcheron. Reason: Oops
    4 years 8 months ago #27 by XaltatunOfAcheron
    • XaltatunOfAcheron
    • XaltatunOfAcheron's Avatar Topic Author


  • Posts: 365

  • Gender: Unknown
  • Birthdate: Unknown
  • XaltatunOfAcheron wrote: It looks like Fandom backed the change out. I'm able to get to whateleyacademy.net from Fandom, and the page source looks like it's got the usual http:// prefix.

    OOPS - I may have been hasty. I can't get to Muse-Of-Krews, and the page source looks like the same. What might have happened is that I've been going over the same 15 pages, so the browser might have gotten them from the cache.

    I had some hopes....


    Well, it's been working perfectly for the last couple of weeks, so I guess they did back the change out. This ticket can be closed.
    Powered by Kunena Forum