From owner-freebsd-ports@FreeBSD.ORG Fri Aug 2 08:51:52 2013 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 6C126A19 for ; Fri, 2 Aug 2013 08:51:52 +0000 (UTC) (envelope-from kpaasial@gmail.com) Received: from mail-qa0-x234.google.com (mail-qa0-x234.google.com [IPv6:2607:f8b0:400d:c00::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 2C3DA2BF9 for ; Fri, 2 Aug 2013 08:51:52 +0000 (UTC) Received: by mail-qa0-f52.google.com with SMTP id bq6so187360qab.4 for ; Fri, 02 Aug 2013 01:51:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=vY7NlBMdRa1O32LYuj4WOry3PhehBUGyiX3zj8Au738=; b=WjmRFSz/yZLwq825uY545vf6OGvC+Jl8eaZucKqEB1GOcQ/Q77NjcPVxOPckAURqWF WJqB9vBJo6+tNtRZQ7o83ANkekoJ5vcgNunzzmi2yT28obtFmHjcFMA8Z6Ve+niv6Pl0 vQaXPNlPylV8qahiwyVErb11cSIyJ1SN0XuCfESIZuLmesdufAtgjlvRjp9E7S0FuG4k XnY1wbh1gro6ie6VguAFD7WxfH6uA2CXeiz4h01UAJBAKZ9AfuAWzCTsGJuSRlOBFZhw eoKBbqjWGdhMJn4EzOWuMz9eFWti53XxayfWLuikvR925Xk8MgMAu20Gm3fsS8bDB8K0 2+TA== MIME-Version: 1.0 X-Received: by 10.49.127.196 with SMTP id ni4mr7573206qeb.5.1375433510377; Fri, 02 Aug 2013 01:51:50 -0700 (PDT) Received: by 10.224.78.194 with HTTP; Fri, 2 Aug 2013 01:51:50 -0700 (PDT) In-Reply-To: <201308020819.r728JhHR033988@mech-cluster241.men.bris.ac.uk> References: <201308020819.r728JhHR033988@mech-cluster241.men.bris.ac.uk> Date: Fri, 2 Aug 2013 11:51:50 +0300 Message-ID: Subject: Re: Error validating server certificate for 'https://svn0.us-east.freebsd.org:443': From: Kimmo Paasiala To: mexas@bris.ac.uk Content-Type: text/plain; charset=UTF-8 Cc: freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Aug 2013 08:51:52 -0000 On Fri, Aug 2, 2013 at 11:19 AM, Anton Shterenlikht wrote: > >From kpaasial@gmail.com Fri Aug 2 09:18:52 2013 >> >>On Fri, Aug 2, 2013 at 11:10 AM, Anton Shterenlikht wrote: >>> # svn up /usr/ports/ >>> Updating '/usr/ports': >>> Error validating server certificate for 'https://svn0.us-east.freebsd.org:443': >>> - The certificate is not issued by a trusted authority. Use the >>> fingerprint to validate the certificate manually! >>> - The certificate hostname does not match. >>> Certificate information: >>> - Hostname: svnmir.ysv.FreeBSD.org >>> - Valid: from Jul 29 22:01:21 2013 GMT until Dec 13 22:01:21 2040 GMT >>> - Issuer: clusteradm, FreeBSD.org, (null), CA, US (clusteradm@FreeBSD.org) >>> - Fingerprint: 1C:BD:85:95:11:9F:EB:75:A5:4B:C8:A3:FE:08:E4:02:73:06:1E:61 >>> (R)eject, accept (t)emporarily or accept (p)ermanently? >>> >>> What's going on? >>> >>> Thanks >>> >>> Anton >>> >> >>The DNS name for the SVN mirror was changed a few days ago into a >>CNAME that points to svnmir.ysv.FreeBSD.org and it no longer matches >>the certificate that you have saved on your system, hence the >>complaint. It's safe to accept the "new" cert. >> >>-Kimmo > > ok, great, thanks for clarifying this. > > Anton Np. You can always check the fingerprints of the certificates manually if there's any lingering doubt :) -Kimmo