Error validating server certificate for 'https://svn.macosforge.org:443'

[Vincent Lefevre]

On 2011-05-01 14:08:21 -0700, William Siegrist wrote:
> 
> On May 1, 2011, at 11:55 AM, Ryan Schmidt wrote:
> 
> > When trying to commit a port update today, I get:
> > 
> >> Error validating server certificate for 'https://svn.macosforge.org:443':
> >> - The certificate is not issued by a trusted authority. Use the
> >>   fingerprint to validate the certificate manually!
> >> Certificate information:
> >> - Hostname: *.macosforge.org
> >> - Valid: from Thu, 28 Apr 2011 22:45:15 GMT until Sat, 31 May 2014 10:51:08 GMT
> >> - Issuer: (c) 2009 Entrust, Inc., www.entrust.net/rpa is incorporated by reference, Entrust, Inc., US
> >> - Fingerprint: bf:77:a4:84:d4:3e:0c:55:28:3d:2a:37:bc:8a:47:39:76:73:b7:02
> > 
> > I guess the certificate was recently updated, since it's valid from April 28, 2011. I wonder why Subversion doesn't see it as valid?

Same problem.

> Yes, it was recently updated, but the chain/issuer is identical so
> I'm surprised you only see this now.

Perhaps because the old authentication was invalidated at the same
time the certificate changed?

I don't remember what I did for the old authentication (it was years
ago), but perhaps OpenSSL certificates were installed or I accepted
permanently.

> The cert appears valid in Safari and /usr/bin/curl. My
> MacPorts-provided curl/openssl also seem to think it is valid,

same here for the MacPorts-provided curl, but I have curl-ca-bundle
installed, which provides /opt/local/share/curl/curl-ca-bundle.crt,
where one can find the Entrust certificate.

Wouldn't it be a good idea to copy these certificates into
"/opt/local/etc/openssl/certs/" (and rehash)?

> but I have not updated them in a while so perhaps I copied root
> certs or something to fix it back then.

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <http://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Arénaire project (LIP, ENS-Lyon)