Opened 9 years ago

Closed 8 years ago

#47652 closed defect (worksforme)

git (and openssl) won't validate git-wip-us.apache.org

Reported by: owen.omalley@… Owned by: macports-tickets@…
Priority: Normal Milestone:
Component: ports Version: 2.3.3
Keywords: Cc:
Port:

Description (last modified by ryandesign (Ryan Carsten Schmidt))

When I try to use git (or openssl) to connect to https://git-wip-us.apache.org/ I get a failure message like:

fatal: unable to access 'https://git-wip-us.apache.org/repos/asf/orc.git/': SSL certificate problem: unable to get local issuer certificate

I've attached the output from openssl s_client -connect git-wip-us.apache.org:443, which also shows the problem.

Attachments (1)

ssl-fail.txt (4.9 KB) - added by owen.omalley@… 9 years ago.
output of openssl

Download all attachments as: .zip

Change History (5)

Changed 9 years ago by owen.omalley@…

Attachment: ssl-fail.txt added

output of openssl

comment:1 Changed 9 years ago by owen.omalley@…

Sorry, more information:

MacOS 10.10.3 MacPorts 2.3.3 git version 2.4.0 openssl version 1.0.2a curl-ca-bundle 7.42.1

comment:2 Changed 9 years ago by neverpanic (Clemens Lang)

In a similar recent case it turned out to be deliberately because the root CA was weak. See #47576. I'm not sure that's the case here as well, though – I cannot find any references to short keys when surfing to the website in a browser (but maybe I'm just not looking at the right spot).

comment:3 Changed 9 years ago by ryandesign (Ryan Carsten Schmidt)

Description: modified (diff)

comment:4 Changed 8 years ago by mf2k (Frank Schima)

Resolution: worksforme
Status: newclosed

Works now. Assuming this was a glitch that resolved itself.

Note: See TracTickets for help on using tickets.