[ensembl-dev] rest.ensemblegnomes.org SSL Certificate isn't valid, browsers block https ajax requests to you

[Nick Langridge]

Hi Boris,

Thanks for bringing this to our attention.
We'll look into it and get back to you.

Best regards,
Nick

Ensembl Genomes web team
EMBL EBI

On 16/02/2017 15:09, burkov wrote:
> Hi,
>
> I am Boris Burkov, I'm working on RNAcentral. We're using E! and 
> Ensemblgenomes APIs to display genome locations in Genoverse browser. 
> We asynchronously load genome locations via Ajax requests from 
> rest.ensembl.org and rest.ensemblgenomes.org using https:// protocol, 
> if possible.
>
> With E! I'm able to successfully access both http://rest.ensembl.org 
> and httpS://rest.ensembl.org.
>
> But with https://rest.ensemblgenomes.org, I'm blocked by the browsers, 
> which claim that connection is insecure, because its SSL certificate 
> is from staffassociation.embl.org (not sure, if it's certificate 
> issuing authority or rest.ensemblgenomes.org is trying to use 
> certificate of staffassociation.embl.org). So, I can't safely query 
> your APIs via Ajax and if I'm hosting my site on https:// domain, I 
> can't fallback to queries to http://rest.ensemblgenomes.org, because 
> of mixed content error (https:// websites are not allowed to issue 
> Ajax calls to http:// websites in modern Google Chrome by default).
>
> Could you get a valid SSL certificate for rest.ensemblgenomes.org, 
> please?
>
> Thanks and regards
>