[Gluster-infra] HTTPS certificate problem on the Forge

John Mark Walker johnmark at johnmark.org
Tue Mar 25 11:59:40 UTC 2014


A known problem. I'll bring in the gitorious guys.

-JM



On Tue, Mar 25, 2014 at 7:55 AM, Justin Clift <justin at gluster.org> wrote:

> Cloning from the Gluster Forge using http(s) is failing with an invalid
> certificate warning:
>
>   $ export GIT_CURL_VERBOSE=1
>   $ git clone
> https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git
>   Cloning into 'gluster-patch-acceptance-tests'...
>   * Couldn't find host git.forge.gluster.org in the .netrc file; using
> defaults
>   * Adding handle: conn: 0x8fba40
>   * Adding handle: send: 0
>   * Adding handle: recv: 0
>   * Curl_addHandleToPipeline: length: 1
>   * - Conn 0 (0x8fba40) send_pipe: 1, recv_pipe: 0
>   * About to connect() to git.forge.gluster.org port 443 (#0)
>   *   Trying 5.9.136.106...
>   * Connected to git.forge.gluster.org (5.9.136.106) port 443 (#0)
>   * Initializing NSS with certpath: sql:/etc/pki/nssdb
>   *   CAfile: /etc/pki/tls/certs/ca-bundle.crt
>     CApath: none
>   * Server certificate:
>   *     subject: CN=forge.gluster.org,O=Red Hat Inc,L=Raleigh,ST=North
> Carolina,C=US,serialNumber=snX4wDYgxbHedFh4atiozb/7j8EnjoRd
>   *     start date: Apr 09 01:49:42 2013 GMT
>   *     expire date: Apr 12 09:47:35 2015 GMT
>   *     common name: forge.gluster.org
>   *     issuer: CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US
>   * NSS error -12276 (SSL_ERROR_BAD_CERT_DOMAIN)
>   * Unable to communicate securely with peer: requested domain name does
> not match the server's certificate.
>   * Closing connection 0
>   fatal: unable to access '
> https://git.forge.gluster.org/gluster-patch-acceptance-tests/gluster-patch-acceptance-tests.git/':
> Unable to communicate securely with peer: requested domain name does not
> match the server's certificate.
>
> This is on Fedora 20 vm, using the OS provided git:
>
>   $ git --version
>   git version 1.8.5.3
>
> Tried forge.gluster.org for the repo URL too just in case :), but
> no go there.
>
> Guessing we'll need to get a server cert specifically for
> git.forge.gluster.org or something.
>
> Is there an easier way for people?
>
> + Justin
>
> --
> Open Source and Standards @ Red Hat
>
> twitter.com/realjustinclift
>
> _______________________________________________
> Gluster-infra mailing list
> Gluster-infra at gluster.org
> http://www.gluster.org/mailman/listinfo/gluster-infra
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.gluster.org/pipermail/gluster-infra/attachments/20140325/69a83468/attachment.html>


More information about the Gluster-infra mailing list