From owner-freebsd-ports@freebsd.org Wed Aug 5 20:05:54 2015 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2DB899B495F for ; Wed, 5 Aug 2015 20:05:54 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id EA4DE2D1 for ; Wed, 5 Aug 2015 20:05:53 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: by obnw1 with SMTP id w1so40069972obn.3 for ; Wed, 05 Aug 2015 13:05:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:content-type; bh=QLoXufWwp+3HCBMLRkNAdpRcmyp2lEBjbQZ9wefAec0=; b=AYAlKFRf/SUXgw684PCEBI0kye8jGDxgXnb7JOE0PrxD60bvNHBMcA+na1jxQ6I6kn 39b+2d9rYOA/1fY1OnAdwNKqKNAdyW8NfdAMDh5oBtWRkQZdW9ubJBWeI/KVwKJU20wp 8h9fpOE+cUZwDwY/SgRoEupHQV7cYyRrCCwwak5aGHJXRcSoNmrUQauF9XQ9OyApQiYq 0eGdvFdlQRe9yDi2DtWBLf7BC3lCFcxCtAX+CrQj0srXhq373umN8QKRFEvFtrGQS/qF WKq4rosqhkRr0U9tw8U6gXUtho9y5s3temqgY8WvjE3SX/czcJ0e/6LEbyDO7Lf8Xt91 QEfg== MIME-Version: 1.0 X-Received: by 10.60.177.73 with SMTP id co9mr9557429oec.5.1438805153112; Wed, 05 Aug 2015 13:05:53 -0700 (PDT) Sender: kob6558@gmail.com Received: by 10.202.221.69 with HTTP; Wed, 5 Aug 2015 13:05:53 -0700 (PDT) Date: Wed, 5 Aug 2015 13:05:53 -0700 X-Google-Sender-Auth: 8BtI0GA5rCVBQ9p3oTl3iDEZmkU Message-ID: Subject: Unable to relocate to new svn URL From: Kevin Oberman To: Peter Wemm , FreeBSD Ports ML Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Aug 2015 20:05:54 -0000 Today I decided to relocate my ports source from the old specific mirror to the new svn.freebsd.org. Seemed like just one easy command, but not quite. First, if subversion is built with the default options, it will refuse to do https:// with the confusing message that the URL format was not recognized. I checked and my svn was notbuilt with SASL. SASL is not on by default. So I rebuilt subversion and now it likes the command, but won't accept the certificate: Error validating server certificate for 'https://svn.freebsd.org:443': - The certificate is not issued by a trusted authority. Use the fingerprint to validate the certificate manually! Certificate information: - Hostname: svn.freebsd.org - Valid: from Jun 22 00:00:00 2015 GMT until Jun 22 23:59:59 2016 GMT - Issuer: Gandi, Paris, Paris, FR - Fingerprint: E9:37:73:80:B5:32:1B:93:92:94:98:17:59:F0:FA:A2:5F:1E:DE:B9 (R)eject, accept (t)emporarily or accept (p)ermanently? Indeed, it does not appear that Gandi is on the certificate.txt. file installed by ca_root_nss. Is this a problem with the ca_root_nss port, the certificate, of is something hacked? Clearly, I am not about to trust the certificate as it now stands. -- Kevin Oberman, Network Engineer, Retired E-mail: rkoberman@gmail.com PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683