When I check out both 6.4svn and 6.5svn I get a warning that the site
certificate cannot be authenticated. Probably needs attention and most
likely easily resolved.
Rich
On Fri, May 20, 2011 at 6:17 PM, Rich Shepard <rshepard@appl-ecosys.com> wrote:
When I check out both 6.4svn and 6.5svn I get a warning that the site
certificate cannot be authenticated. Probably needs attention and most
likely easily resolved.
Rich,
the certificate was expired in the beginning of this month. Could it be that you
accepted the non-certificate permanently rather than temporarily?
I don't know how to get rid of an outdated certificate in a local SVN copy
but the OSGeo SSL Certificate is correct after it has been renewed.
Markus
On Sat, 21 May 2011, Markus Neteler wrote:
the certificate was expired in the beginning of this month. Could it be
that you accepted the non-certificate permanently rather than temporarily?
Markus,
No. I had not downloaded from svn for a month or more and I accepted the
certificate only temporarily.
I don't know how to get rid of an outdated certificate in a local SVN copy
but the OSGeo SSL Certificate is correct after it has been renewed.
OK. I'll continue to accept temporarily until the situation is resolved.
Thanks,
Rich
Rich Shepard wrote:
> I don't know how to get rid of an outdated certificate in a local SVN copy
> but the OSGeo SSL Certificate is correct after it has been renewed.OK. I'll continue to accept temporarily
I'd suggest that you don't do that. There is nothing wrong with the
current certificate. If it doesn't verify, either there's a
configuration problem on your system, or you're being MitM'd (I'd
guess at the former, but ignoring validation failures entirely defeats
the point of using SSL).
The certificate chain is AddTrust -> Comodo -> osgeo.org:
Subject: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High-Assurance Secure Server CA
Subject: C=US/postalCode=97005-2343, ST=OR, L=Beaverton/street=14525 SW Millikan #42523, O=Open Source Geospatial Foundation, OU=Comodo SGC SSL Wildcard, CN=*.osgeo.org
Ensure that you have AddTrust's root certificate installed (the
OpenSSL hash is 157753a5.0).
until the situation is resolved.
There's nothing to resolve. The certificate was invalid for a couple
of days at the beginning of the month, but that is no longer relevant.
--
Glynn Clements <glynn@gclements.plus.com>