[MacPorts] #42727: Server certificate verification failed: issuer is not trusted (https://svn.macports.org

[Shreeraj Karulkar]

Thanks Ryan. I ran the command on the three slaves and “accepted” the cert permanently. However, I saw some strange behavior. Not sure if this would be an issue though.

On "teneight-slave” and "tennine-slave"s the svn info runs fine when used with a “sudo”, however without sudo (user=local) it keeps prompting to take action with the new certificates, (reject, accept etc) every time you run the svn info command. 
Let me know what you think.

Shree






On Mar 9, 2014, at 7:53 PM, MacPorts <noreply at macports.org> wrote:

> #42727: Server certificate verification failed: issuer is not trusted
> (https://svn.macports.org
> -----------------------------+-------------------------
>  Reporter:  ryandesign@…    |      Owner:  wsiegrist@…
>      Type:  defect          |     Status:  new
>  Priority:  Normal          |  Milestone:
> Component:  server/hosting  |    Version:
> Resolution:                  |   Keywords:
>      Port:                  |
> -----------------------------+-------------------------
> 
> Comment (by ryandesign@…):
> 
> I believe you just need to run any svn command on the MacPorts repository
> URL, i.e.:
> 
> {{{
> /usr/bin/svn info https://svn.macports.org/repository/macports
> }}}
> 
> This will prompt you whether you want to accept the certificate:
> 
> {{{
> Error validating server certificate for 'https://svn.macports.org:443':
>  - The certificate is not issued by a trusted authority. Use the
>    fingerprint to validate the certificate manually!
> Certificate information:
>  - Hostname: *.macports.org
>  - Valid: from Mon, 03 Mar 2014 20:37:03 GMT until Mon, 02 Mar 2015
> 01:19:52 GMT
>  - Issuer: GlobalSign nv-sa, BE
>  - Fingerprint:
> e6:bd:44:a5:29:e4:ef:ef:47:92:f1:6d:80:e6:48:98:30:30:dc:0b
> (R)eject, accept (t)emporarily or accept (p)ermanently?
> }}}
> 
> Answer "p" to accept it permanently, and that should be it.
> 
> However, I'm not sure which user this task needs to be performed as.
> According to the [https://build.macports.org/builders/buildbase-lion-
> x86_64/builds/867/steps/svn/logs/stdio buildbot log], the user trying to
> run the svn command is "buildbot", so maybe that's the user who needs to
> have the cert accepted:
> 
> {{{
> sudo -u buildbot /usr/bin/svn info
> https://svn.macports.org/repository/macports
> }}}
> 
> -- 
> Ticket URL: <https://trac.macports.org/ticket/42727#comment:5>
> MacPorts <http://www.macports.org/>
> Ports system for OS X