Opened 14 years ago

Closed 13 years ago

#24436 closed defect (fixed)

port livecheck error: peer certificate cannot be authenticated with known CA certificates

Reported by: vinc17@… Owned by: macports-tickets@…
Priority: Normal Milestone: MacPorts 2.0.0
Component: base Version: 1.8.2
Keywords: Cc:
Port:

Description

I get the following error:

$ port livecheck gmp-ecm
Error: cannot check if gmp-ecm was updated (peer certificate cannot be authenticated with known CA certificates)

The problem is that gmp-ecm is hosted by INRIAGforge, which uses https only (possibly after a redirection from http). So, either MacPorts should not try to authenticate the hosts (this wouldn't be more a security problem than http, which is used in general), or it should make sure that the necessary CA certificates are installed (no problem with recent Firefox and curl, however wget complains).

FYI, the CA certificate for INRIAGforge should now be here: http://www.cru.fr/services/tcs/certificats

I haven't tried, though.

Change History (3)

comment:1 Changed 14 years ago by jmroot (Joshua Root)

Summary: port error: peer certificate cannot be authenticated with known CA certificatesport livecheck error: peer certificate cannot be authenticated with known CA certificates

comment:2 Changed 14 years ago by vinc17@…

I wonder whether the same problem occurs with "port fetch" (until the file gets cached on MacPorts servers).

comment:3 Changed 13 years ago by jmroot (Joshua Root)

Milestone: MacPorts 2.0.0
Resolution: fixed
Status: newclosed

This should have been fixed by r70975.

Note: See TracTickets for help on using tickets.