Support #2962

INSPIRE Geoportal Discovery Service Registry not available until further notice

Added by Angelo Quaglia over 3 years ago. Updated over 2 years ago.

Status:AssignedStart date:14 Mar 2017
Priority:ImmediateDue date:
Assignee:Angelo Quaglia% Done:

0%

Category:Discovery Service Register
Target version:-
Submitting Organisation: Knowledge-Base relevant?:
Proactive:No Keyword #1:
Country: Keyword #2:
Originating UI: Keyword #3:

Description

Dear INSPIRE Geoportal users,

a vulnerabilty has been discovered in one open source component used by the INSPIRE Geoportal Discovery Service Registry:

https://cwiki.apache.org/confluence/display/WW/S2-045

Access to the service from the internet has been temporarily interrupted until the component is updated.

We will notify you as soon as access is restored.


Related issues

Related to Geoportal Helpdesk - Support #2980: EL: Unable to access the Discovery Service Registry Resolved 04 May 2017

History

#1 Updated by Angelo Quaglia over 3 years ago

Dear INSPIRE Geoportal users,

a vulnerabilty has been discovered in one open source component used by the INSPIRE Geoportal Discovery Service Registry:

https://cwiki.apache.org/confluence/display/WW/S2-045

Access to the service from the internet has been temporarily interrupted until the component is updated.

We will notify you as soon as access is restored.

#2 Updated by Angelo Quaglia over 3 years ago

The INSPIRE Geoportal Discovery Service Registry is using an earlier version of the component which does not seem to be affected by the same vulnerability.

#3 Updated by Angelo Quaglia over 3 years ago

We are awaiting more details about the security assessment.

Should you need to make any updates to your Discovery Service registrations, please let us know by updating this issue.

In that case, we would appreciate if you could tell us the public IP address you will use for connecting.

We will then reenable the service for the time necessary to carry out your updates.

 

#4 Updated by Christine Najar over 3 years ago

Dear Angelo,

I have tried to access http://inspire-geoportal.ec.europa.eu/INSPIRERegistry/ for registering the Swiss CSW endpoint but couldn’t.

Could you support me?

Thanks and kind regards,

Christine

#5 Updated by Angelo Quaglia over 3 years ago

  • Status changed from Assigned to Feedback

Dear Christine,

please try now.

We have a potential vulnerability described in Issue #2962 so we do not keep it accessible all the time.

Please tell me when you are done.

Best regards,

Angelo

 

#6 Updated by Angelo Quaglia over 3 years ago

  • Status changed from Feedback to Assigned
The security team is rather inflexible and we have to replace a critical component and that will take some time.
 
We can authorize your IP address if you need to make modifications to the registration.
 
However, if you only need to access your latest validation report, there is a viable workaround:
 
You open this URL in your browser:
http://inspire-geoportal.ec.europa.eu/GeoportalProxyWebServices/resources/INSPIREResourcesReport
 
You get redirected to the daily report for the whole INSPIRE Geoportal, for example:
 
Then you click "Summary of ISO Metadata resources" under "Listings per Country/Discovery Service:
 

 

 

 
Then, you scroll down the table until you reach the row corresponding to your National Discovery Service.
Then, you click on "Report":
 

 

Also available in: Atom PDF