[asterisk-bugs] [JIRA] (ASTERISK-30170) Untrusted certificate used for svn.digium.com

[Joshua C. Colp (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-30170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=259909#comment-259909 ] 

Joshua C. Colp edited comment on ASTERISK-30170 at 8/9/22 3:56 AM:
-------------------------------------------------------------------

There have been no changes to this, aside from renewing and updating the TLS certificate in April. I'm also not able to reproduce it on any of my systems, and haven't seen any reports from those who still use format_mp3.

What distribution and version is this occurring on? Did packages change there for the trusted root certificates?

What does manually doing: svn ls https://svn.digium.com/svn/thirdparty/mp3/trunk

Result in?


was (Author: jcolp):
There have been no changes to this, aside from renewing and updating the TLS certificate in April. I'm also not able to reproduce it on any of my systems, and haven't seen any reports from those who still use format_mp3.

What distribution and version is this occurring on? Did packages change there for the trusted root certificates?

> Untrusted certificate used for svn.digium.com
> ---------------------------------------------
>
>                 Key: ASTERISK-30170
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30170
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Contrib/General
>    Affects Versions: 18.13.0
>            Reporter: N A
>            Assignee: N A
>
> This seems to have started some time recently - installs are getting blocked due to a warning about svn.digium.com using an untrusted certificate.
> Perhaps the certificate could be updated, or the endpoint changed?
> {noformat}
> #############################################
> ## install completed successfully
> #############################################
> Error validating server certificate for 'https://svn.digium.com:443':
>  - The certificate is not issued by a trusted authority. Use the
>    fingerprint to validate the certificate manually!
> Certificate information:
>  - Hostname: *.digium.com
>  - Valid: from Apr 21 00:00:00 2022 GMT until May  1 23:59:59 2023 GMT
>  - Issuer: GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1, DigiCert Inc, US
>  - Fingerprint: D2:49:EC:5A:DE:E2:E5:1B:74:22:FD:39:22:FA:B1:78:B9:34:87:FA
> (R)eject, accept (t)emporarily or accept (p)ermanently?
> {noformat}
> Furthermore, upon accepting, it fails anyways:
> {noformat}
> svn: E170013: Unable to connect to a repository at URL 'https://svn.digium.com/svn/thirdparty/mp3/trunk'
> svn: E120108: Error running context: The server unexpectedly closed the connection.
> {noformat}
> I can access it in my browser, but https gets redirected to http so not sure if something changed here recently.
> I believe this stems from a problem with:
> ./contrib/scripts/get_mp3_source.sh
> <s>I'm not entirely clear on what the impact of this is, since app_mp3 seems to compile as normal, but it does seem to block the install process.</s>
> Okay, I take that back, I do get this after all at the end, which has not happened before:
> {noformat}
> **************************************************************
> ***                                                        ***
> ***    ---> IMPORTANT INFORMATION ABOUT format_mp3 <---    ***
> ***                                                        ***
> *** format_mp3 has been selected to be installed, but the  ***
> *** MP3 decoder library has not yet been downloaded into   ***
> *** the source tree.  To do so, please run the following   ***
> *** command:                                               ***
> ***                                                        ***
> ***          $ contrib/scripts/get_mp3_source.sh           ***
> ***                                                        ***
> **************************************************************
> Installing modules from addons...
> /usr/bin/install: cannot stat 'format_mp3.so': No such file or directory
> make[1]: *** [/usr/src/asterisk-18.13.0/Makefile.moddir_rules:109: install] Error 1
> make: *** [Makefile:584: addons-install] Error 2
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)