[zanata-users] ACTION REQUIRED: Zanata client upgrade required for translate.zanata.org

[Sean Flanigan]

Hi Zanata users,


If you use command-line tools like zanata-maven-plugin or zanata-cli to
push/pull content to or from translate.zanata.org, you might have been
receiving this error message recently:

    hostname in certificate didn't match: <translate.zanata.org> !=
<*.itos.redhat.com>

This problem [1] is connected to the recent change in infrastructure for
translate.zanata.org.  Please read on for a solution to this problem.


To fix the hostname error, you need to:

 1. upgrade your Zanata client to 3.3.2 or later, and
 2. upgrade Java to 1.7 or later (*recommended*) or disable SSL checks
(*NOT recommended*: risk of man-in-the-middle attack).


Upgrading Java
--------------

You can check your default version of Java with this:

    java -version

On Red Hat Enterprise Linux and Fedora, you should be able to able to
install Java 1.7 with this command (as root):

    yum install java-1.7.0

If you have multiple JVMs installed, you should be able to select the
one you need with this (as root):

    /usr/sbin/alternatives --config java

(Note to developers: please ensure that JAVACMD and JAVA_HOME aren't
pointing to an old version of Java.)


Upgrading Maven plugin
----------------------

If you are using Maven, you will need to change the version for
zanata-maven-plugin in the project's pom.xml to 3.3.2, like this:

    <plugin>
      <groupId>org.zanata</groupId>
      <artifactId>zanata-maven-plugin</artifactId>
      <version>3.3.2</version>
    </plugin>

(If you use Java 1.6, the Maven option to disable SSL checks is:
-Dzanata.disableSSLCert )


Upgrading Fedora package
------------------------

If you are using the Fedora package for zanata-client, we should have a
new release out in the next few days.  In the meantime, you could try
zanata-client-ivy (below) to get the latest version of the client.

(If you use Java 1.6, the zanata-cli option to disable SSL checks is:
--disable-ssl-cert )


Upgrading zanata-client-ivy
---------------------------

If you are using zanata-client-ivy, just grab the latest zanata-cli from
https://github.com/zanata/zanata-client-ivy and it will use 3.3.2.

(If you use Java 1.6, the zanata-cli option to disable SSL checks is:
--disable-ssl-cert )





In case of problems, please let us know on the mailing list
zanata-users at redhat.com or report a bug: http://zanata.org/issues/


[1] https://bugzilla.redhat.com/show_bug.cgi?id=1102465


Regards,


Sean


-- 
Sean Flanigan

Senior Software Engineer
Engineering - Internationalisation
Red Hat

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 295 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/zanata-users/attachments/20140529/4678a716/attachment.sig>