Today I decided to relocate my ports source from the old specific mirror to
the new svn.freebsd.org. Seemed like just one easy command, but not quite.

First, if subversion is built with the default options, it will refuse to
do https:// with the confusing message that the URL format was not
recognized. I checked and my svn was notbuilt with SASL. SASL is not on by
default. So I rebuilt subversion and now it likes the command, but won't
accept the certificate:
Error validating server certificate for 'https://svn.freebsd.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: svn.freebsd.org
 - Valid: from Jun 22 00:00:00 2015 GMT until Jun 22 23:59:59 2016 GMT
 - Issuer: Gandi, Paris, Paris, FR
 - Fingerprint: E9:37:73:80:B5:32:1B:93:92:94:98:17:59:F0:FA:A2:5F:1E:DE:B9
(R)eject, accept (t)emporarily or accept (p)ermanently?

Indeed, it does not appear that Gandi is on the certificate.txt. file
installed by ca_root_nss.

Is this a problem with the ca_root_nss port, the certificate, of is
something hacked? Clearly, I am not about to trust the certificate as it
now stands.
--
Kevin Oberman, Network Engineer, Retired
E-mail: rkober...@gmail.com
PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683
_______________________________________________
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"

Reply via email to