You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Christopher Schultz <ch...@christopherschultz.net> on 2012/06/06 16:20:49 UTC

Problem updating TC site

All,

I just made an update to the Tomcat site project and was trying to
publish it live following the instructions in README.txt. As such, I
ssh'd to people.apache.org, cd /www/tomcat.apache.org and tried to do an
'svn up'. I got an invalid certificate error from svn.apache.org:


schultz@minotaur:/www/tomcat.apache.org$ svn up
Error validating server certificate for 'https://svn.apache.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: *.apache.org
 - Valid: from Tue, 20 Dec 2011 00:00:00 GMT until Mon, 17 Feb 2014
23:59:59 GMT
 - Issuer: Thawte, Inc., US
 - Fingerprint: bc:5f:40:92:fd:6a:49:aa:f8:b8:35:0d:ed:27:5e:a6:64:c1:7a:1b
(R)eject, accept (t)emporarily or accept (p)ermanently? R
svn: OPTIONS of
'https://svn.apache.org/repos/asf/tomcat/site/trunk/docs': Server
certificate verification failed: issuer is not trusted
(https://svn.apache.org)

I stopped the connection in case something was amiss.

Any ideas what might be going on?

Thanks,
-chris


Re: Problem updating TC site

Posted by Konstantin Kolinko <kn...@gmail.com>.
2012/6/6 Christopher Schultz <ch...@christopherschultz.net>:
> All,
>
> I just made an update to the Tomcat site project and was trying to
> publish it live following the instructions in README.txt. As such, I
> ssh'd to people.apache.org, cd /www/tomcat.apache.org and tried to do an
> 'svn up'. I got an invalid certificate error from svn.apache.org:
>
>
> schultz@minotaur:/www/tomcat.apache.org$ svn up
> Error validating server certificate for 'https://svn.apache.org:443':
>  - The certificate is not issued by a trusted authority. Use the
>   fingerprint to validate the certificate manually!
> Certificate information:
>  - Hostname: *.apache.org
>  - Valid: from Tue, 20 Dec 2011 00:00:00 GMT until Mon, 17 Feb 2014
> 23:59:59 GMT
>  - Issuer: Thawte, Inc., US
>  - Fingerprint: bc:5f:40:92:fd:6a:49:aa:f8:b8:35:0d:ed:27:5e:a6:64:c1:7a:1b
> (R)eject, accept (t)emporarily or accept (p)ermanently? R
> svn: OPTIONS of
> 'https://svn.apache.org/repos/asf/tomcat/site/trunk/docs': Server
> certificate verification failed: issuer is not trusted
> (https://svn.apache.org)
>
> I stopped the connection in case something was amiss.
>
> Any ideas what might be going on?
>

The cert was changed some time ago. (in January 2012)
https://twitter.com/infrabot/statuses/155072112128831488

So the last time you used svn client on p.a.o should have been before that date.

BTW, you can see the same certificate if you open
https://svn.apache.org/repos/asf/
in a web browser

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: Problem updating TC site

Posted by Mark Thomas <ma...@apache.org>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/06/2012 15:20, Christopher Schultz wrote:
> All,
> 
> I just made an update to the Tomcat site project and was trying to 
> publish it live following the instructions in README.txt. As such,
> I ssh'd to people.apache.org, cd /www/tomcat.apache.org and tried
> to do an 'svn up'. I got an invalid certificate error from
> svn.apache.org:
> 
> 
> schultz@minotaur:/www/tomcat.apache.org$ svn up Error validating
> server certificate for 'https://svn.apache.org:443': - The
> certificate is not issued by a trusted authority. Use the 
> fingerprint to validate the certificate manually! Certificate
> information: - Hostname: *.apache.org - Valid: from Tue, 20 Dec
> 2011 00:00:00 GMT until Mon, 17 Feb 2014 23:59:59 GMT - Issuer:
> Thawte, Inc., US - Fingerprint:
> bc:5f:40:92:fd:6a:49:aa:f8:b8:35:0d:ed:27:5e:a6:64:c1:7a:1b 
> (R)eject, accept (t)emporarily or accept (p)ermanently? R svn:
> OPTIONS of 
> 'https://svn.apache.org/repos/asf/tomcat/site/trunk/docs': Server 
> certificate verification failed: issuer is not trusted 
> (https://svn.apache.org)
> 
> I stopped the connection in case something was amiss.
> 
> Any ideas what might be going on?

The cert is valid. See [1]. Either the svn client is having trouble
traversing the certificate chain or the CA cert is missing. Either
way, p is an acceptable choice above.

Mark

[1] http://www.apache.org/dev/version-control.html#cert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPz3UvAAoJEBDAHFovYFnnaBwQALikkuGN5a7xdm1oFV+IoPQy
xw8gdw+hm4cGgN9nSdw5Rrxz5t5I61nOLMjLtYjQu3r0nwoFm9/yEKHyt2by0bI4
MwI6ld5eTR5sQ36dvWalL2wO++loZnaZWna9yIXXFF/G3FZCD9ioDztKVZj5plhw
tzBWDWrxsPsg2AmCaa7HsQUVUgyukDWSqa3BX3HwoqVSHru5o5FyTuwKjQjxqzSr
3lcLM90Mya5Xk0AxrLWBFnE/VjFr1OP6gMPEgTDAHsNfAwLRaaT/WSJwTo3JgNAd
mWU05ITKHU2kmG4htxXofIrf7sRJJq8ZlM18Ax+tjpDdWhkVoabE+4oBARf/bNII
dTA+q27wsTQRnpCdhuyXnRFsN750QWoC8XDlJrY4CDorsQjVM3D+3BQIMPy2yaGQ
VqUClZdn/OsiGhWY667OiSw1tuvuB2b21WYIU5CU+JBM7T8jFlVOg/aWDA78wUnT
St+C5E0ny9ThsCloY/EuYV8yF+kurU50Y6ZuyWicqWz+Jtw5SzhYhPERwYk5XjlB
g4r7xmFd2CzhAA6mSNdFbBVSFJOCcV/LW4HYLToQCtGmmKEK8NfDta/da8MKL7GR
31gMsYnHKw3VwE8Elj1nbLGYy5uSMHhm31RVi2QrE2Fj8fV5uXWb5K2Ts7/yBwJg
yXSijX3ICgQsm3AOAXCG
=hlxJ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org