From owner-freebsd-security@freebsd.org Thu Jun 18 23:04:34 2020 Return-Path: Delivered-To: freebsd-security@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C56FF337430 for ; Thu, 18 Jun 2020 23:04:34 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 49nyDy4vh0z4CV3; Thu, 18 Jun 2020 23:04:34 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from FreeBSD.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by freefall.freebsd.org (Postfix) with ESMTPS id 50D7331B5; Thu, 18 Jun 2020 23:04:34 +0000 (UTC) (envelope-from gjb@freebsd.org) Date: Thu, 18 Jun 2020 23:04:32 +0000 From: Glen Barber To: Daniel Lysfjord Cc: freebsd-security@freebsd.org Subject: Re: pkg.freebsd.org cert has expired :/ Message-ID: <20200618230432.GG61041@FreeBSD.org> References: <78327651-4041-80b3-e91a-e10b49606313@chroot.pl> <2FF82E5C-0503-49A5-899F-266AA9C1D9E0@tetlows.org> <0e54b182-cb7e-8241-1532-ed18e4bd1b9b@smokepit.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="PqX6tBBuHl4HmZHK" Content-Disposition: inline In-Reply-To: <0e54b182-cb7e-8241-1532-ed18e4bd1b9b@smokepit.net> X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Jun 2020 23:04:34 -0000 --PqX6tBBuHl4HmZHK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 19, 2020 at 12:21:10AM +0200, Daniel Lysfjord via freebsd-secur= ity wrote: > On 19.06.2020 00:14, Gordon Tetlow via freebsd-security wrote: > > pkg.freebsd.org is a geographically distribut= ed set of servers. Can you please go to https://pkg.freebsd.org/ or http://pkg.freebsd.org/ and t= ell us which mirror you are hitting that has an expired certificate? The mi= rror name should be on the page. >=20 > Both those links point to pkg0.pkt.FreeBSD.org for me, and the certificate > is indeed expired. >=20 Fixed. Thank you for the report. Glen --PqX6tBBuHl4HmZHK Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEjRJAPC5sqwhs9k2jAxRYpUeP4pMFAl7r8wAACgkQAxRYpUeP 4pPH7w//VW9sa0ItCgVCjthKpk5DTYYetlR9PlwQWx9tHJkxJnyBhW5URgcWztQi QoM3nITO9PNbpv8U9aQY6Y1N8Bp+M5nG+IvllC2MiAiaUw1Iyu6LMdSwmCXYEwk/ yzKSjQ3XYb9Lec0F1jxrGlHmKMQmVZCibENVlo2zEzc+L5Om3FWE6lddQGHPTtUj BRM/lv817zQp55jIYJGdyxsGrAFE8lTaOcBSpezbscUnEX+UAqKTGSCTCWt1gfZr Ai4KML+sIoqhfXz10LnIbj9WxXAKrZ8gahw0skHEh1Cg8iCkFBQrMsk8XsQcGxDU pahJc5FxehYmH+PwYTZ1lg+lzQzb5IXzwjyHkO1WM1wy1nYtuA3+FU2WxzGeXwsc E2n57emn+ltrqF0h3UNBDdTgtO4Jk168Org2EYPv8+kIqun78jg0AMjCsRyEQuIW N674tzmg7YKlfamhkEstje5qMP86RT1dnB4tXKiUASAzWKAMWz+7Kiafu3+belFT USYY9Ngy0WT14WInHfiUzMl0ekWf/YnGKe+AcU0IXyUANiN29ajBtj8+lV9dbj8z Vx73xCgEEC+vfHJrKoaHFiIlw9aJOhtC+CZlAlNajb5lJ3e2T6y/HfkXImLiitbR 5LvNVq6Um/re0lwg37c6934iZ9WFbxSeQdR2r3phDi6C//8+XEQ= =keU3 -----END PGP SIGNATURE----- --PqX6tBBuHl4HmZHK--