Maniphest T2969

speedo install fails due to cert issue for swdb.lst
Closed, ResolvedPublic
Actions

Assigned To
azul
Authored By
azul
Feb 20 2017, 6:50 PM
Tags
Subscribers
azul

Description

I'm trying to build the latest gnupg on travis to build on top of it.

Following the speedo approach i get a download error for swdb.lst. It looks like
the cert for versions.gnupg.org causes wget to fail:

$ export urlbase="https://versions.gnupg.org/"
$ wget -O swdb.lst "$urlbase/swdb.lst"

--2017-02-20 17:34:02-- https://versions.gnupg.org//swdb.lst

Resolving versions.gnupg.org (versions.gnupg.org)... 217.69.76.56,
2001:aa8:fff1:2100::56

Connecting to versions.gnupg.org (versions.gnupg.org)|217.69.76.56|:443...
connected.

ERROR: no certificate subject alternative name matches

requested host name `versions.gnupg.org'.

To connect to versions.gnupg.org insecurely, use `--no-check-certificate'.

Details

External Link
https://travis-ci.org/azul/gpg-build/builds/203530535
Version
2.1.18

Event Timeline

azul set Version to 2.1.18.Feb 20 2017, 6:50 PM
azul set External Link to https://travis-ci.org/azul/gpg-build/builds/203530535.
azul added projects: gnupg (gpg21), Bug Report.
azul added a subscriber: azul.
azul added a comment.Feb 20 2017, 7:13 PM

The same build works locally for me with wget 1.17.1.
travis has 1.13.4

$ wget --version

GNU Wget 1.13.4 built on linux-gnu.

+digest +https +ipv6 +iri +large-file +nls +ntlm +opie +ssl/openssl

Wgetrc:

    /etc/wgetrc (system)

Locale: /usr/share/locale

Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"

    -DLOCALEDIR="/usr/share/locale" -I. -I../../src -I../lib 

    -I../../lib -D_FORTIFY_SOURCE=2 -Iyes/include -g -O2 

    -fstack-protector --param=ssp-buffer-size=4 -Wformat 

    -Wformat-security -Werror=format-security -DNO_SSLv2 

    -D_FILE_OFFSET_BITS=64 -g -Wall

Link: gcc -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat

    -Wformat-security -Werror=format-security -DNO_SSLv2 

    -D_FILE_OFFSET_BITS=64 -g -Wall -Wl,-Bsymbolic-functions 

    -Wl,-z,relro -Lyes/lib -lssl -lcrypto -lz -ldl -lz -lidn -lrt 

    ftp-opie.o openssl.o http-ntlm.o ../lib/libgnu.a

Copyright (C) 2009 Free Software Foundation, Inc.

License GPLv3+: GNU GPL version 3 or later

http://www.gnu.org/licenses/gpl.html.

This is free software: you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law.

Originally written by Hrvoje Niksic <hniksic@xemacs.org>.

Please send bug reports and questions to <bug-wget@gnu.org>.

azul added a comment.Feb 20 2017, 7:18 PM

Okay... using a later distribution with a newer wget fixed this:
https://travis-ci.org/azul/gpg-build/builds/203543109

closing. Sorry for the noise.

azul closed this task as Resolved.Feb 20 2017, 7:19 PM
azul claimed this task.