fetch ssl errors on _some_ buildbots

[Mihai Moldovan]

On 22.03.2015 06:33 PM, Bradley Giesbrecht wrote:
> From what appears to be the same servers the Mavericks and Yosemite buildbots were able to fetch via https while Snow Leopard, Lion and Mountain Lion buildbots were not.
>
> Is this known and expected behavior or something for the macosforge admins to look into?

I think (but may be wrong) that means that the server operator disabled
SSLv3/TLSv1.0. Options to continue would be TLSv1.1 and TLSv1.2, but the
old curl/openssl Apple ships does not seem to be able to use these
protocols. Fetching does work with "our own" curl, which is using
TLSv1.2 when talking to this server. But we're using much newer curl and
openssl versions.

As base uses the system libcurl to fetch files, there's not much we can
do, except hope that the distfiles will be mirrored by MP mirrors
eventually and buildbots be able to fetch from those locations.



Mihai

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <https://lists.macosforge.org/pipermail/macports-dev/attachments/20150322/ff7898c6/attachment.sig>