mainSavannah Administration - Support: sr #110602, SSL certificate has expired

 
 

sr #110602: SSL certificate has expired

Submitter:  Stephan Wilhelm <swilhelm>
Submitted:  Thu 03 Feb 2022 08:23:25 AM UTC
   
 
Category:  Source code repositories - anonymous access Priority:  5 - Normal
Severity:  4 - Important Status:  Works For Me
Privacy:  Public Assigned to:  rwp
Operating System:  Mac OS Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 05 Feb 2022 07:19:19 AM UTC, comment #3: 

Whew!  Good to hear that the problem is solved.

To be honest I have been working on the server and when I first saw the problem report I had a terror that something was broken! :-)

We do appreciate problem reports.  If you run into another problem please don't hesitate to report it!

If you need it the http protocol and git protocol are both still supported.  If you verify the git hash then you can be assured that you have the same bits as if an encrypted protocol had been used.

Bob Proulx <rwp>
Site Administrator
Sat 05 Feb 2022 06:55:47 AM UTC, comment #2: 

Ok, problem solved. It was on my side, the macos 101.4.6 was too old, maybe with missing certificate updates. On another iMac with latest macos version it works!

Sorry for this alert. ;-)

Stephan Wilhelm <swilhelm>
Fri 04 Feb 2022 07:37:28 AM UTC, comment #1: 

Thank you for submitting a problem report.  However I am unable to reproduce this problem.  The certificate for https://git.savannah.nongnu.org/git/lwip.git/ when I look expires Fri, 18 Mar 2022 10:32:26 GMT which is still some time in the future.

You can verify this yourself using this command.

openssl s_client -connect git.savannah.nongnu.org:443 -CApath /etc/ssl/certs -showcerts </dev/null 2>/dev/null  | sed -n '/^-----BEGIN CERTIFICATE-----/,/^-----END CERTIFICATE-----/p;/^-----END CERTIFICATE-----/q' | openssl x509 -noout -dates

Perhaps the clock on your system is too far in the future or too far in the past?  Can you verify with us that your system time is set okay?  If the system time is too far off then it will not be able to validate the certificate.

Bob Proulx <rwp>
Site Administrator
Thu 03 Feb 2022 08:23:25 AM UTC, original submission:  

I have a problem to clone a git repo, because there is a problem with SSL certificate. Here's the original log:

Cloning into '/Users/swilhelm/Documents/gits/atari-st-rpikb/pico-sdk/lib/tinyusb/lib/lwip'...

fatal: unable to access 'https://git.savannah.nongnu.org/git/lwip.git/': SSL certificate problem: certificate has expired

Stephan Wilhelm <swilhelm>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by swilhelm (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2022-02-05 rwp Open/ClosedOpen Closed
    2022-02-04 rwp StatusNone Works For Me
        Assigned toNone rwp

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code