From owner-freebsd-ports@FreeBSD.ORG Fri Aug 2 08:19:50 2013 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 018902B0 for ; Fri, 2 Aug 2013 08:19:50 +0000 (UTC) (envelope-from mexas@bristol.ac.uk) Received: from eu1sys200aog113.obsmtp.com (eu1sys200aog113.obsmtp.com [207.126.144.135]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 494EE2AB2 for ; Fri, 2 Aug 2013 08:19:48 +0000 (UTC) Received: from mail-we0-f181.google.com ([74.125.82.181]) (using TLSv1) by eu1sys200aob113.postini.com ([207.126.147.11]) with SMTP ID DSNKUftro2SiZCnkfRdFSZRWyILyZ8XXZz+4@postini.com; Fri, 02 Aug 2013 08:19:49 UTC Received: by mail-we0-f181.google.com with SMTP id p58so267686wes.12 for ; Fri, 02 Aug 2013 01:19:47 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=sender:date:from:message-id:to:subject:cc:reply-to:in-reply-to :x-gm-message-state; bh=i1U+b9nNHbt5s7GDQHChitvsE1RrZexDh5erjsdJU7Q=; b=SJ5QLDCgsnvgsskF4DZ+7x9+wT5CLesTbAG10pvdfqsZ6k55dwavWPMzV8XfZv2QJc 4HtGBeKLR11oV/gbM3ub4FaQ1mYRKd/7nYAJGjVDbVVHxsqaaKGO6/U+5uFugDimcLH8 qlxgEGt8HkaFSqQMba1+oBiTn+uFkFO/a3D9ViF75JJoiFSOu/IxTofBwsofkPMkwmlO 53rqYmdPXSwazWi4JVF7VAEUYmiGNR1AckamiguWvbukjSi28G4JSHCZe4rZrwloeDYk jF6IbxnCBuh4S8CZ5jPrTrLZLepWQyB4qjweEe88swktUTRveKPhD9Wzl3hDnNK+QYzQ Q4Tw== X-Received: by 10.194.173.225 with SMTP id bn1mr4094278wjc.6.1375431587088; Fri, 02 Aug 2013 01:19:47 -0700 (PDT) X-Received: by 10.194.173.225 with SMTP id bn1mr4094272wjc.6.1375431587030; Fri, 02 Aug 2013 01:19:47 -0700 (PDT) Received: from mech-cluster241.men.bris.ac.uk (mech-cluster241.men.bris.ac.uk. [137.222.187.241]) by mx.google.com with ESMTPSA id nb12sm1666740wic.3.2013.08.02.01.19.45 for (version=TLSv1.2 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 02 Aug 2013 01:19:46 -0700 (PDT) Sender: Anton Shterenlikht Received: from mech-cluster241.men.bris.ac.uk (localhost [127.0.0.1]) by mech-cluster241.men.bris.ac.uk (8.14.7/8.14.6) with ESMTP id r728JifT033989 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 2 Aug 2013 09:19:44 +0100 (BST) (envelope-from mexas@mech-cluster241.men.bris.ac.uk) Received: (from mexas@localhost) by mech-cluster241.men.bris.ac.uk (8.14.7/8.14.6/Submit) id r728JhHR033988; Fri, 2 Aug 2013 09:19:43 +0100 (BST) (envelope-from mexas) Date: Fri, 2 Aug 2013 09:19:43 +0100 (BST) From: Anton Shterenlikht Message-Id: <201308020819.r728JhHR033988@mech-cluster241.men.bris.ac.uk> To: kpaasial@gmail.com, mexas@bris.ac.uk Subject: Re: Error validating server certificate for 'https://svn0.us-east.freebsd.org:443': In-Reply-To: X-Gm-Message-State: ALoCoQlw6y3PlQEj0K7FYDqRpG3x6yQVrp2rEIhJF+xWQno0v3ifOcOd10CsCp5YWqvnuTo+A0ErNWd7Fs/O6aQaRU+6bPp0ieKKmnoyIw1h+YH1tp0mv/1jEWWa+G/6v1T37DIfWIF2Ho3oRgoB6iF6H3sOtLUpQZkSQ/39MBRkxGnqvg2bvms= Cc: freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: mexas@bris.ac.uk List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Aug 2013 08:19:50 -0000 >From kpaasial@gmail.com Fri Aug 2 09:18:52 2013 > >On Fri, Aug 2, 2013 at 11:10 AM, Anton Shterenlikht wrote: >> # svn up /usr/ports/ >> Updating '/usr/ports': >> Error validating server certificate for 'https://svn0.us-east.freebsd.org:443': >> - The certificate is not issued by a trusted authority. Use the >> fingerprint to validate the certificate manually! >> - The certificate hostname does not match. >> Certificate information: >> - Hostname: svnmir.ysv.FreeBSD.org >> - Valid: from Jul 29 22:01:21 2013 GMT until Dec 13 22:01:21 2040 GMT >> - Issuer: clusteradm, FreeBSD.org, (null), CA, US (clusteradm@FreeBSD.org) >> - Fingerprint: 1C:BD:85:95:11:9F:EB:75:A5:4B:C8:A3:FE:08:E4:02:73:06:1E:61 >> (R)eject, accept (t)emporarily or accept (p)ermanently? >> >> What's going on? >> >> Thanks >> >> Anton >> > >The DNS name for the SVN mirror was changed a few days ago into a >CNAME that points to svnmir.ysv.FreeBSD.org and it no longer matches >the certificate that you have saved on your system, hence the >complaint. It's safe to accept the "new" cert. > >-Kimmo ok, great, thanks for clarifying this. Anton