port livecheck error: peer certificate cannot be authenticated with known CA certificates

[vinc17@…]

I get the following error:

$ port livecheck gmp-ecm
Error: cannot check if gmp-ecm was updated (peer certificate cannot be authenticated with known CA certificates)

The problem is that gmp-ecm is hosted by INRIAGforge, which uses https only (possibly after a redirection from http). So, either MacPorts should not try to authenticate the hosts (this wouldn't be more a security problem than http, which is used in general), or it should make sure that the necessary CA certificates are installed (no problem with recent Firefox and curl, however wget complains).

FYI, the CA certificate for INRIAGforge should now be here: ​http://www.cru.fr/services/tcs/certificats

I haven't tried, though.

[vinc17@…]

I wonder whether the same problem occurs with "port fetch" (until the file gets cached on MacPorts servers).

[jmr@…]

This should have been fixed by r70975.