[asterisk-bugs] [JIRA] (ASTERISK-30170) Untrusted certificate used for svn.digium.com

[Joshua C. Colp (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-30170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Joshua C. Colp updated ASTERISK-30170:
--------------------------------------

    Assignee: N A
      Status: Waiting for Feedback  (was: Triage)

> Untrusted certificate used for svn.digium.com
> ---------------------------------------------
>
>                 Key: ASTERISK-30170
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30170
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Contrib/General
>    Affects Versions: 18.13.0
>            Reporter: N A
>            Assignee: N A
>
> This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.
> Perhaps the certificate could be updated, or the endpoint changed?
> {noformat}
> #############################################
> ## install completed successfully
> #############################################
> Error validating server certificate for 'https://svn.digium.com:443':
>  - The certificate is not issued by a trusted authority. Use the
>    fingerprint to validate the certificate manually!
> Certificate information:
>  - Hostname: *.digium.com
>  - Valid: from Apr 21 00:00:00 2022 GMT until May  1 23:59:59 2023 GMT
>  - Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
>  - Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
> (R)eject, accept (t)emporarily or accept (p)ermanently?
> {noformat}
> Furthermore, upon accepting, it fails anyways:
> {noformat}
> svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
> svn: E120108: Error running context: The server unexpectedly closed the connection.
> {noformat}
> I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.
> I believe this stems from a problem with:
> ./contrib/scripts/get_mp3_source.sh
> <s>I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.</s>
> Okay, I take that back, I do get this after all at the end, which has not happened before:
> {noformat}
> **************************************************************
> ***                                                        ***
> ***    ---> IMPORTANT INFORMATION ABOUT format_mp3 <---    ***
> ***                                                        ***
> *** format_mp3 has been selected to be installed, but the  ***
> *** MP3 decoder library has not yet been downloaded into   ***
> *** the source tree.  To do so, please run the following   ***
> *** command:                                               ***
> ***                                                        ***
> ***          $ contrib/scripts/get_mp3_source.sh           ***
> ***                                                        ***
> **************************************************************
> Installing modules from addons...
> /usr/bin/install: cannot stat 'format_mp3.so': No such file or directory
> make[1]: *** [/usr/src/asterisk-18.13.0/Makefile.moddir_rules:109: install] Error 1
> make: *** [Makefile:584: addons-install] Error 2
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)