[asterisk-bugs] [JIRA] (ASTERISK-30170) Untrusted certificate used for svn.digium.com
N A (JIRA)
noreply at issues.asterisk.org
Mon Aug 8 18:33:08 CDT 2022
[ https://issues.asterisk.org/jira/browse/ASTERISK-30170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
N A updated ASTERISK-30170:
---------------------------
Description:
This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.
Perhaps the certificate could be updated, or the endpoint changed?
{noformat}
#############################################
## install completed successfully
#############################################
Error validating server certificate for 'https://svn.digium.com:443':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: *.digium.com
- Valid: from Apr 21 00:00:00 2022 GMT until May 1 23:59:59 2023 GMT
- Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
- Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
(R)eject, accept (t)emporarily or accept (p)ermanently?
{noformat}
Furthermore, upon accepting, it fails anyways:
{noformat}
svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
svn: E120108: Error running context: The server unexpectedly closed the connection.
{noformat}
I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.
I believe this stems from a problem with:
./contrib/scripts/get_mp3_source.sh
<s>I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.</s>
Okay, I take that back, I do get this after all at the end, which has not happened before:
{noformat}
**************************************************************
*** ***
*** ---> IMPORTANT INFORMATION ABOUT format_mp3 <--- ***
*** ***
*** format_mp3 has been selected to be installed, but the ***
*** MP3 decoder library has not yet been downloaded into ***
*** the source tree. To do so, please run the following ***
*** command: ***
*** ***
*** $ contrib/scripts/get_mp3_source.sh ***
*** ***
**************************************************************
Installing modules from addons...
/usr/bin/install: cannot stat 'format_mp3.so': No such file or directory
make[1]: *** [/usr/src/asterisk-18.13.0/Makefile.moddir_rules:109: install] Error 1
make: *** [Makefile:584: addons-install] Error 2
{noformat}
was:
This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.
Perhaps the certificate could be updated, or the endpoint changed?
{noformat}
#############################################
## install completed successfully
#############################################
Error validating server certificate for 'https://svn.digium.com:443':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
Certificate information:
- Hostname: *.digium.com
- Valid: from Apr 21 00:00:00 2022 GMT until May 1 23:59:59 2023 GMT
- Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
- Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
(R)eject, accept (t)emporarily or accept (p)ermanently?
{noformat}
Furthermore, upon accepting, it fails anyways:
{noformat}
svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
svn: E120108: Error running context: The server unexpectedly closed the connection.
{noformat}
I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.
I believe this stems from a problem with:
./contrib/scripts/get_mp3_source.sh
I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.
> Untrusted certificate used for svn.digium.com
> ---------------------------------------------
>
> Key: ASTERISK-30170
> URL: https://issues.asterisk.org/jira/browse/ASTERISK-30170
> Project: Asterisk
> Issue Type: Bug
> Security Level: None
> Components: Contrib/General
> Affects Versions: 18.13.0
> Reporter: N A
>
> This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.
> Perhaps the certificate could be updated, or the endpoint changed?
> {noformat}
> #############################################
> ## install completed successfully
> #############################################
> Error validating server certificate for 'https://svn.digium.com:443':
> - The certificate is not issued by a trusted authority. Use the
> fingerprint to validate the certificate manually!
> Certificate information:
> - Hostname: *.digium.com
> - Valid: from Apr 21 00:00:00 2022 GMT until May 1 23:59:59 2023 GMT
> - Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
> - Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
> (R)eject, accept (t)emporarily or accept (p)ermanently?
> {noformat}
> Furthermore, upon accepting, it fails anyways:
> {noformat}
> svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
> svn: E120108: Error running context: The server unexpectedly closed the connection.
> {noformat}
> I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.
> I believe this stems from a problem with:
> ./contrib/scripts/get_mp3_source.sh
> <s>I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.</s>
> Okay, I take that back, I do get this after all at the end, which has not happened before:
> {noformat}
> **************************************************************
> *** ***
> *** ---> IMPORTANT INFORMATION ABOUT format_mp3 <--- ***
> *** ***
> *** format_mp3 has been selected to be installed, but the ***
> *** MP3 decoder library has not yet been downloaded into ***
> *** the source tree. To do so, please run the following ***
> *** command: ***
> *** ***
> *** $ contrib/scripts/get_mp3_source.sh ***
> *** ***
> **************************************************************
> Installing modules from addons...
> /usr/bin/install: cannot stat 'format_mp3.so': No such file or directory
> make[1]: *** [/usr/src/asterisk-18.13.0/Makefile.moddir_rules:109: install] Error 1
> make: *** [Makefile:584: addons-install] Error 2
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
More information about the asterisk-bugs
mailing list