Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Aug 2015 13:05:53 -0700
From:      Kevin Oberman <rkoberman@gmail.com>
To:        Peter Wemm <peter@wemm.org>, FreeBSD Ports ML <freebsd-ports@freebsd.org>
Subject:   Unable to relocate to new svn URL
Message-ID:  <CAN6yY1tez0Zhwt1mo4XdrinZ2OkyFH1U-Ew2VAv%2BWH=4YVv9=g@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Today I decided to relocate my ports source from the old specific mirror to
the new svn.freebsd.org. Seemed like just one easy command, but not quite.

First, if subversion is built with the default options, it will refuse to
do https:// with the confusing message that the URL format was not
recognized. I checked and my svn was notbuilt with SASL. SASL is not on by
default. So I rebuilt subversion and now it likes the command, but won't
accept the certificate:
Error validating server certificate for 'https://svn.freebsd.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: svn.freebsd.org
 - Valid: from Jun 22 00:00:00 2015 GMT until Jun 22 23:59:59 2016 GMT
 - Issuer: Gandi, Paris, Paris, FR
 - Fingerprint: E9:37:73:80:B5:32:1B:93:92:94:98:17:59:F0:FA:A2:5F:1E:DE:B9
(R)eject, accept (t)emporarily or accept (p)ermanently?

Indeed, it does not appear that Gandi is on the certificate.txt. file
installed by ca_root_nss.

Is this a problem with the ca_root_nss port, the certificate, of is
something hacked? Clearly, I am not about to trust the certificate as it
now stands.
--
Kevin Oberman, Network Engineer, Retired
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAN6yY1tez0Zhwt1mo4XdrinZ2OkyFH1U-Ew2VAv%2BWH=4YVv9=g>