[asterisk-bugs] [JIRA] (ASTERISK-30170) Untrusted certificate used for svn.digium.com

N A (JIRA) noreply at issues.asterisk.org
Mon Aug 8 18:20:08 CDT 2022


N A created ASTERISK-30170:
------------------------------

             Summary: Untrusted certificate used for svn.digium.com
                 Key: ASTERISK-30170
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30170
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Contrib/General
    Affects Versions: 18.13.0
            Reporter: N A


This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.

Perhaps the certificate could be updated, or the endpoint changed?

{noformat}
#############################################
## install completed successfully
#############################################
Error validating server certificate for 'https://svn.digium.com:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: *.digium.com
 - Valid: from Apr 21 00:00:00 2022 GMT until May  1 23:59:59 2023 GMT
 - Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
 - Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
(R)eject, accept (t)emporarily or accept (p)ermanently?
{noformat}

Furthermore, upon accepting, it fails anyways:
{noformat}
svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
svn: E120108: Error running context: The server unexpectedly closed the connection.
{noformat}

I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.

I believe this stems from a problem with:

./contrib/scripts/get_mp3_source.sh

I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.



--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list