[Gluster-infra] HTTPS certificate problem on the Forge
John Mark Walker
johnmark at johnmark.org
Tue Mar 25 11:59:40 UTC 2014
A known problem. I'll bring in the gitorious guys.
-JM
On Tue, Mar 25, 2014 at 7:55 AM, Justin Clift <justin at gluster.org> wrote:
> Cloning from the Gluster Forge using http(s) is failing with an invalid
> certificate warning:
>
> $ export GIT_CURL_VERBOSE=1
> $ git clone
> https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git
> Cloning into 'gluster-patch-acceptance-tests'...
> * Couldn't find host git.forge.gluster.org in the .netrc file; using
> defaults
> * Adding handle: conn: 0x8fba40
> * Adding handle: send: 0
> * Adding handle: recv: 0
> * Curl_addHandleToPipeline: length: 1
> * - Conn 0 (0x8fba40) send_pipe: 1, recv_pipe: 0
> * About to connect() to git.forge.gluster.org port 443 (#0)
> * Trying 5.9.136.106...
> * Connected to git.forge.gluster.org (5.9.136.106) port 443 (#0)
> * Initializing NSS with certpath: sql:/etc/pki/nssdb
> * CAfile: /etc/pki/tls/certs/ca-bundle.crt
> CApath: none
> * Server certificate:
> * subject: CN=forge.gluster.org,O=Red Hat Inc,L=Raleigh,ST=North
> Carolina,C=US,serialNumber=snX4wDYgxbHedFh4atiozb/7j8EnjoRd
> * start date: Apr 09 01:49:42 2013 GMT
> * expire date: Apr 12 09:47:35 2015 GMT
> * common name: forge.gluster.org
> * issuer: CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US
> * NSS error -12276 (SSL_ERROR_BAD_CERT_DOMAIN)
> * Unable to communicate securely with peer: requested domain name does
> not match the server's certificate.
> * Closing connection 0
> fatal: unable to access '
> https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git/':
> Unable to communicate securely with peer: requested domain name does not
> match the server's certificate.
>
> This is on Fedora 20 vm, using the OS provided git:
>
> $ git --version
> git version 1.8.5.3
>
> Tried forge.gluster.org for the repo URL too just in case :), but
> no go there.
>
> Guessing we'll need to get a server cert specifically for
> git.forge.gluster.org or something.
>
> Is there an easier way for people?
>
> + Justin
>
> --
> Open Source and Standards @ Red Hat
>
> twitter.com/realjustinclift
>
> _______________________________________________
> Gluster-infra mailing list
> Gluster-infra at gluster.org
> http://www.gluster.org/mailman/listinfo/gluster-infra
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.gluster.org/pipermail/gluster-infra/attachments/20140325/69a83468/attachment.html>
More information about the Gluster-infra
mailing list