https://bugzilla.wikimedia.org/show_bug.cgi?id=41437

Jimmy Xu <xu.jimmy....@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
                 CC|                            |xu.jimmy....@gmail.com
         Resolution|FIXED                       |

--- Comment #9 from Jimmy Xu <xu.jimmy....@gmail.com> 2012-11-20 13:04:02 UTC 
---
The certificate chain seems to be erroneously configured, a wrong CA "Wikimedia
CA" is being appended to the chain instead of the issuer "DigiCert High
Assurance CA-3":

---
Certificate chain
 0 s:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation,
Inc./CN=*.wikidata.org
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3
 1 s:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/CN=Wikimedia CA
   i:/C=US/ST=California/L=San Francisco/O=Wikimedia Foundation/CN=Wikimedia CA
---

Therefore:

$ curl -v https://www.wikidata.org
* About to connect() to www.wikidata.org port 443 (#0)
*   Trying 2620:0:861:ed1a::12...
* connected
[...cut...]
* SSLv3, TLS alert, Server hello (2):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection #0

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to