[Gluster-infra] HTTPS certificate problem on the Forge

[Justin Clift]

Cloning from the Gluster Forge using http(s) is failing with an invalid
certificate warning:

  $ export GIT_CURL_VERBOSE=1
  $ git clone https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git
  Cloning into 'gluster-patch-acceptance-tests'...
  * Couldn't find host git.forge.gluster.org in the .netrc file; using defaults
  * Adding handle: conn: 0x8fba40
  * Adding handle: send: 0
  * Adding handle: recv: 0
  * Curl_addHandleToPipeline: length: 1
  * - Conn 0 (0x8fba40) send_pipe: 1, recv_pipe: 0
  * About to connect() to git.forge.gluster.org port 443 (#0)
  *   Trying 5.9.136.106...
  * Connected to git.forge.gluster.org (5.9.136.106) port 443 (#0)
  * Initializing NSS with certpath: sql:/etc/pki/nssdb
  *   CAfile: /etc/pki/tls/certs/ca-bundle.crt
    CApath: none
  * Server certificate:
  * 	subject: CN=forge.gluster.org,O=Red Hat Inc,L=Raleigh,ST=North Carolina,C=US,serialNumber=snX4wDYgxbHedFh4atiozb/7j8EnjoRd
  * 	start date: Apr 09 01:49:42 2013 GMT
  * 	expire date: Apr 12 09:47:35 2015 GMT
  * 	common name: forge.gluster.org
  * 	issuer: CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US
  * NSS error -12276 (SSL_ERROR_BAD_CERT_DOMAIN)
  * Unable to communicate securely with peer: requested domain name does not match the server's certificate.
  * Closing connection 0
  fatal: unable to access 'https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git/': Unable to communicate securely with peer: requested domain name does not match the server's certificate.

This is on Fedora 20 vm, using the OS provided git:

  $ git --version
  git version 1.8.5.3

Tried forge.gluster.org for the repo URL too just in case :), but
no go there.

Guessing we'll need to get a server cert specifically for
git.forge.gluster.org or something.

Is there an easier way for people?

+ Justin

--
Open Source and Standards @ Red Hat

twitter.com/realjustinclift