Package: qa.debian.org User: qa.debian....@packages.debian.org Usertags: webpages Tags: patch
On Sat, May 30, 2015 at 02:07:48PM -0400, James McCoy wrote: > On Sat, May 30, 2015 at 12:55:27PM -0400, Michael Gilbert wrote: > > Running uscan on packages using the sf.net redirector will results in: > > $ uscan --verbose --report > > uscan warning: In debian/watch, > > no matching hrefs for watch line > > http://sf.net/wine/wine-(.+)\.tar\.bz2 > > -- Scan finished > > Fallout from the upgrade to Jessie, it seems: > > [Sat May 30 07:22:51.153551 2015] [:error] [pid 22026] [client > 5.48.220.179:36535] PHP Warning: simplexml_load_file(): SSL operation failed > with code 1. OpenSSL Error messages:\nerror:14090086:SSL > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in > /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153684 2015] [:error] [pid 22026] [client > 5.48.220.179:36535] PHP Warning: simplexml_load_file(): Failed to enable > crypto in /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153860 2015] [:error] [pid 22026] [client > 5.48.220.179:36535] PHP Warning: > simplexml_load_file(https://sourceforge.net/projects/limitcpu/rss?limit=10000000000000000000): > failed to open stream: operation failed in > /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153954 2015] [:error] [pid 22026] [client > 5.48.220.179:36535] PHP Warning: simplexml_load_file(): I/O warning : failed > to load external entity > "https://sourceforge.net/projects/limitcpu/rss?limit=10000000000000000000" > in /srv/qa.debian.org/web/watch/sf.php on line 18 > > Not sure what needs to be fixed, off-hand. Looks like this is related to <https://wiki.debian.org/ServicesSSL>. The attached patch is working for me. Cheers, -- James GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <james...@debian.org>
From 03564691812515470851f3192f5077a0dd708c54 Mon Sep 17 00:00:00 2001 From: James McCoy <vega.ja...@gmail.com> Date: Sat, 30 May 2015 14:54:25 -0400 Subject: [PATCH] watch/sf.wml: Use ca-global to validate SourceForge certs Signed-off-by: James McCoy <vega.ja...@gmail.com> --- wml/watch/sf.wml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/wml/watch/sf.wml b/wml/watch/sf.wml index ebbf5a7..ba502ee 100644 --- a/wml/watch/sf.wml +++ b/wml/watch/sf.wml @@ -20,6 +20,9 @@ if (preg_match(',/.+,', $project)) { $xml_url = "https://sourceforge.net/projects/$project/rss?limit=10000000000000000000"; +$context = stream_context_create(array('ssl' => array('capath' => '/etc/ssl/ca-global'))); +libxml_set_streams_context($context); + $xml = simplexml_load_file($xml_url, 'SimpleXMLElement', LIBXML_NOCDATA); $title = $xml->channel[0]->title; $files = $xml->channel[0]->item; -- 2.1.4
signature.asc
Description: Digital signature