Opened 9 months ago

Last modified 9 months ago

#68932 closed defect

GitLab SSL certificate changed so we can no longer mirror its files — at Version 3

Reported by: NucleaPeon (Dann) Owned by: admin@…
Priority: Normal Milestone:
Component: server/hosting Version: 2.8.1
Keywords: Cc:
Port:

Description (last modified by ryandesign (Ryan Carsten Schmidt))

I recently installed youtube-dl based on a macport installation that hasn't been updated in a while. It completed successfully. I then went to do a selfupdate and the corresponding 'sudo port upgrade outdated' command which failed when it attempted to download a version of svt-av1 that apparently doesn't exist on many servers. It eventually gave up and failed.

While data is in the log I'm attaching, basic info is this:
MacPorts 2.8.1
OS: OS X 10.6.8

Change History (5)

Changed 9 months ago by NucleaPeon (Dann)

Attachment: svt-av1.log added

main.log file of svt-av1

Changed 9 months ago by NucleaPeon (Dann)

Attachment: port-svt-av1-fail.tiff added

screenshot of terminal when failure occurs

comment:1 Changed 9 months ago by NucleaPeon (Dann)

I cannot install an older version either, so downgrading is not an option and I'm currently stuck. I'm attempting to package up youtube-dl and openssh using mpkg for a project.

comment:2 Changed 9 months ago by NucleaPeon (Dann)

I tried replacing the svt-av1 file with the available 1.8.0 version but the hashes don't match.

comment:3 Changed 9 months ago by ryandesign (Ryan Carsten Schmidt)

Component: portsserver/hosting
Description: modified (diff)
Keywords: svt-av1 404 removed
Owner: set to admin@…
Port: sv1-av1 removed
Status: newassigned
Summary: svt-av1 attempts to download version 1.8.0_1 but 404's every mirror it tries. Cannot find newer version but 1.8.0_1 is only available versionGitLab SSL certificate changed so we can no longer mirror its files

Yes, I noticed this today. svt-av1 is hosted on GitLab. GitLab changed their SSL certificate a couple days ago and it is now no longer possible to connect to GitLab using the version of curl that comes with OS X 10.11 or earlier. This shouldn't have been a problem for users because we mirror the files on our server, so you should have been able to get it from our mirrors, but the machine that does the mirroring runs OS X 10.11 so it is not able to mirror this file or any other files from GitLab anymore. Upgrading the mirroring machine to a new OS version has the potential to introduce more problems so I plan to fix the problem with a smaller change: changing the MacPorts installation that the mirroring process uses so that it uses MacPorts curl instead of macOS curl, since MacPorts curl uses a newer SSL library that is able to connect to all servers.

Note: See TracTickets for help on using tickets.