Opened 9 years ago

Last modified 9 years ago

#47652 closed defect

git (and openssl) won't validate git-wip-us.apache.org — at Version 3

Reported by: owen.omalley@… Owned by: macports-tickets@…
Priority: Normal Milestone:
Component: ports Version: 2.3.3
Keywords: Cc:
Port:

Description (last modified by ryandesign (Ryan Carsten Schmidt))

When I try to use git (or openssl) to connect to https://git-wip-us.apache.org/ I get a failure message like:

fatal: unable to access 'https://git-wip-us.apache.org/repos/asf/orc.git/': SSL certificate problem: unable to get local issuer certificate

I've attached the output from openssl s_client -connect git-wip-us.apache.org:443, which also shows the problem.

Change History (4)

Changed 9 years ago by owen.omalley@…

Attachment: ssl-fail.txt added

output of openssl

comment:1 Changed 9 years ago by owen.omalley@…

Sorry, more information:

MacOS 10.10.3 MacPorts 2.3.3 git version 2.4.0 openssl version 1.0.2a curl-ca-bundle 7.42.1

comment:2 Changed 9 years ago by neverpanic (Clemens Lang)

In a similar recent case it turned out to be deliberately because the root CA was weak. See #47576. I'm not sure that's the case here as well, though – I cannot find any references to short keys when surfing to the website in a browser (but maybe I'm just not looking at the right spot).

comment:3 Changed 9 years ago by ryandesign (Ryan Carsten Schmidt)

Description: modified (diff)
Note: See TracTickets for help on using tickets.