Re: DNF and https

2016-04-10 Thread Adam Williamson
On Sun, 2016-04-10 at 18:59 +0100, Russel Winder wrote: > On Sun, 2016-04-10 at 11:35 -0400, Igor Gnatenko wrote: > > > > Can you try this? > > > > SSLCertificateFile/etc/letsencrypt/live/www.russel.org.uk/cert.pe > > m > > SSLCertificateKeyFile

Re: DNF and https

2016-04-10 Thread Gordon Messmer
On 04/09/2016 07:35 AM, Russel Winder wrote: I have experimental evidence that dnf fails using https if the repository site certificate is a Let's Encrypt one. Is this a bug or a feature? Have you correctly included the certificate chain? If not, your browser might have the required

Re: DNF and https

2016-04-10 Thread Russel Winder
On Sun, 2016-04-10 at 11:35 -0400, Igor Gnatenko wrote: > Can you try this? > > SSLCertificateFile/etc/letsencrypt/live/www.russel.org.uk/cert.pe > m > SSLCertificateKeyFile /etc/letsencrypt/live/www.russel.org.uk/privkey > .pem > SSLCertificateChainFile

Re: DNF and https

2016-04-10 Thread Igor Gnatenko
l Winder" <rus...@winder.org.uk> > To: test@lists.fedoraproject.org > Sent: Sunday, April 10, 2016 4:41:33 PM > Subject: Re: DNF and https > > On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote: > > > […] > > how did you set SSL th

Re: DNF and https

2016-04-10 Thread Russel Winder
On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote: > […] > how did you set SSL there? I guess a bit wrongly.. SSLEngine on SSLCertificateFile "/etc/letsencrypt/live/www.russel.org.uk/cer t.pem" SSLCertificateKeyFile "/etc/letsencrypt/live/www.russel.org.uk/

Re: DNF and https

2016-04-10 Thread Igor Gnatenko
's Encrypt Authority X1 Please show settings of your webserver.. - Original Message - > From: "Russel Winder" <rus...@winder.org.uk> > To: test@lists.fedoraproject.org > Sent: Sunday, April 10, 2016 1:38:48 PM > Subject: Re: DNF and https > > On Sat, 20

Re: DNF and https

2016-04-09 Thread Adam Williamson
On Sat, 2016-04-09 at 15:54 +0100, Pawel Bogucki wrote: > Do you have a public repo with such cert for testing? You could try one of the repos I have lying around www.happyassassin.net , as I just flipped that over to LE. https://www.happyassassin.net/repos/doom/ should do. -- Adam Williamson

Re: DNF and https

2016-04-09 Thread Pawel Bogucki
Do you have a public repo with such cert for testing? On 9 April 2016 at 15:35, Russel Winder <rus...@winder.org.uk> wrote: > Hi, > > I have experimental evidence that dnf fails using https if the > repository site certificate is a Let's Encrypt one. Is this a bug or a > fea

DNF and https

2016-04-09 Thread Russel Winder
Hi, I have experimental evidence that dnf fails using https if the repository site certificate is a Let's Encrypt one. Is this a bug or a feature? -- Russel. = Dr Russel Winder t: +44 20 7585 2200 voip