Thanks Martin,

I added an extra step to sync up the ca-certificates within my docker container 
that I use to build dunfell.  This seems to have resolved the issue that I 
encountered.



Regards,

Darcy

Darcy Watkins ::  Senior Staff Engineer, Firmware

SIERRA WIRELESS
Direct  +1 604 233 7989   ::  Fax  +1 604 231 1109  ::  Main  +1 604 231 1100
13811 Wireless Way  :: Richmond, BC Canada V6V 3A4
[M4]
dwatk...@sierrawireless.com<mailto:dwatk...@sierrawireless.com> :: 
www.sierrawireless.com<http://www.sierrawireless.com/>

From: Martin Jansa <martin.ja...@gmail.com>
Date: Wednesday, November 3, 2021 at 5:26 PM
To: Darcy Watkins <dwatk...@sierrawireless.com>
Cc: yocto@lists.yoctoproject.org <yocto@lists.yoctoproject.org>
Subject: Re: [yocto] Dunfell - ERROR: ca-certificates-20211016-r0 do_fetch: 
Fetcher failure
Most likely expired Let's Encrypt certificate (which 
salsa.debian.org<https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsalsa.debian.org%2F&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094023632%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=EEF1F0g1K2u7ShE5pBdfQM7LlAEZOKvt47hxsDTqkl8%3D&reserved=0>
 where ca-certificates are hoster is using) on your builder (host OS), see e.g. 
for ubuntu:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1928989<https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.launchpad.net%2Fubuntu%2F%2Bsource%2Fopenssl%2F%2Bbug%2F1928989&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094033602%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=VrVxhORfor8nsL9izU16kZFTrmVBJCqG2%2FdugO%2BIVNU%3D&reserved=0>

So to fix this update ca-certificates on your host distribution and then it 
should be fine.

On Thu, Nov 4, 2021 at 1:20 AM Darcy Watkins 
<dwatk...@sierrawireless.com<mailto:dwatk...@sierrawireless.com>> wrote:
Hi,

After syncup of Yocto dunfell, I get the following error:


dwatkins@carmd-ed-n11377-docker-dwatkins_apollo17:64bit build $ bitbake 
ca-certificates -c fetch

Loading cache: 100% 
|#################################################################################################################################################################################################################################################|
 Time: 0:00:00

Loaded 4042 entries from dependency cache.

Parsing recipes: 100% 
|###############################################################################################################################################################################################################################################|
 Time: 0:00:00

Parsing of 2833 .bb files complete (2815 cached, 18 parsed). 4060 targets, 183 
skipped, 0 masked, 0 errors.

WARNING: No recipes available for:

  
/home/dwatkins/workspace/mgos/apollo17/meta-mg90-bsp/recipes-kernel/firmware/linux-firmware_git.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mg90-bsp/recipes-kernel/linux/linux-qoriq_4.19.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-distro/meta-openssl-fips/recipes-support/openssl/openssl_1.0.2%.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-core/recipes-support/cherrypy/cherrypy-python_%.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-core/recipes-support/hostapd/hostapd_2.6.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-core/recipes-support/hostapd/hostapd_2.8.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-core/recipes-support/wpa-supplicant/wpa-supplicant_2.6.bbappend

  
/home/dwatkins/workspace/mgos/apollo17/meta-mgos-core/recipes-support/wpa-supplicant/wpa-supplicant_2.7.bbappend

NOTE: Resolving any missing task queue dependencies



Build Configuration:

BB_VERSION           = "1.46.0"

BUILD_SYS            = "x86_64-linux"

NATIVELSBSTRING      = "universal"

TARGET_SYS           = "arm-poky-linux-gnueabi"

MACHINE              = "mg90"

DISTRO               = "mgos"

DISTRO_VERSION       = "3.1.11"

TUNE_FEATURES        = "arm vfp cortexa7 neon callconvention-hard"

TARGET_FPU           = "hard"

meta-mgos-core       = "main:96c5c6d35f19d16f65100ee29cb23e9a1470876c"

meta-mgos-release    = "main:0825ac63c95db495330848f80d6d68b6f47a77d4"

meta-mg90-bsp        = "main:47d0284b7a337df7587055c405213f9428c94884"

meta-mgos-airprime   = "main:5e8ffb01629c60d282b22e3313740e3b2cf325f4"

meta

meta-daisy-cf

meta-openssl-fips

meta-sigma           = "main:abf8a7a7408b690dfb0dff796ce8e94b6b661b0d"

meta

meta-poky

meta-yocto-bsp       = "HEAD:0810ac6b926cd901f0619e95f367efc79d4c3159"

meta-oe

meta-networking

meta-python

meta-perl            = "HEAD:814eec96c2a29172da57a425a3609f8b6fcc6afe"

meta-security

meta-integrity

meta-security-compliance

meta-security-isafw  = "HEAD:b76698c788cb8ca632077a972031899ef15025d6"

meta-freescale       = "HEAD:727fd8df20c8ee58474ce15cd5e1459f14bee977"

meta-java            = "HEAD:6e84638d77ac921aac46649095bca5ddbde94d2a"

workspace            = "<unknown>:<unknown>"



Initialising tasks: 100% 
|############################################################################################################################################################################################################################################|
 Time: 0:00:00

Sstate summary: Wanted 0 Found 0 Missed 0 Current 0 (0% match, 0% complete)

NOTE: No setscene tasks

NOTE: Executing Tasks

WARNING: ca-certificates-20211016-r0 do_fetch: Failed to fetch URL 
git://salsa.debian.org/debian/ca-certificates.git;protocol=https<https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsalsa.debian.org%2Fdebian%2Fca-certificates.git%3Bprotocol%3Dhttps&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094033602%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=138AIRTehPauZBvZO%2F4%2FxLROE0qdwEDLA%2B2JLVDWesk%3D&reserved=0>,
 attempting MIRRORS if available

ERROR: ca-certificates-20211016-r0 do_fetch: Fetcher failure: Fetch command 
export PSEUDO_DISABLED=1; export 
PATH="/home/dwatkins/workspace/mgos/apollo17/build/tmp/sysroots-uninative/x86_64-linux/usr/bin:/home/dwatkins/workspace/mgos/apollo17/upstream/yocto/poky/scripts:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot-native/usr/bin/allarch-poky-linux:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot/usr/bin/crossscripts:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot-native/usr/sbin:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot-native/usr/bin:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot-native/sbin:/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/recipe-sysroot-native/bin:/home/dwatkins/workspace/mgos/apollo17/upstream/yocto/poky/bitbake/bin:/home/dwatkins/workspace/mgos/apollo17/build/tmp/hosttools";
 export HOME="/home/dwatkins"; LANG=C git -c core.fsyncobjectfiles=0 fetch -f 
--progress 
"https://salsa.debian.org/debian/ca-certificates.git<https://can01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsalsa.debian.org%2Fdebian%2Fca-certificates.git&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094043546%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=vOtQ6JonoKq%2BkjJFdjbNrnzjZWW9JfZoKSRtL9dk1e4%3D&reserved=0>"
 refs/*:refs/* failed with exit code 128, no output

ERROR: ca-certificates-20211016-r0 do_fetch: Bitbake Fetcher Error: 
FetchError('Unable to fetch URL from any source.', 
'git://salsa.debian.org/debian/ca-certificates.git;protocol=https<https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsalsa.debian.org%2Fdebian%2Fca-certificates.git%3Bprotocol%3Dhttps&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094053498%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=yLKDzQwmQEFG0nOiKXbOxnUyqpP0NiWPWfPVL44PGho%3D&reserved=0>')

ERROR: Logfile of failure stored in: 
/home/dwatkins/workspace/mgos/apollo17/build/tmp/work/all-poky-linux/ca-certificates/20211016-r0/temp/log.do_fetch.11215

ERROR: Task 
(/home/dwatkins/workspace/mgos/apollo17/upstream/yocto/poky/meta/recipes-support/ca-certificates/ca-certificates_20211016.bb:do_fetch)
 failed with exit code '1'

NOTE: Tasks Summary: Attempted 1 tasks of which 0 didn't need to be rerun and 1 
failed.



Summary: 1 task failed:

  
/home/dwatkins/workspace/mgos/apollo17/upstream/yocto/poky/meta/recipes-support/ca-certificates/ca-certificates_20211016.bb:do_fetch

Summary: There were 2 WARNING messages shown.

Summary: There were 2 ERROR messages shown, returning a non-zero exit code.

dwatkins@carmd-ed-n11377-docker-dwatkins_apollo17:64bit build $


Looking in the git history, I find a recent commit…

commit 7158bf0775383eefcec148c47310b4681bfbed86
Author: Alexander Kanavin 
<alex.kana...@gmail.com<mailto:alex.kana...@gmail.com>>
Date:   Tue Oct 19 17:33:29 2021 +0200

    ca-certificates: update 20210119 -> 20211016

    (From OE-Core rev: 43aa25b523b2c11ce483ea22435196dfca259b30)

    Signed-off-by: Alexander Kanavin 
<a...@linutronix.de<mailto:a...@linutronix.de>>
    Signed-off-by: Alexandre Belloni 
<alexandre.bell...@bootlin.com<mailto:alexandre.bell...@bootlin.com>>
    Signed-off-by: Richard Purdie 
<richard.pur...@linuxfoundation.org<mailto:richard.pur...@linuxfoundation.org>>
    (cherry picked from commit c479b8a810d966d7267af1b4dac38a46f55fc547)
    Signed-off-by: Steve Sakoman <st...@sakoman.com<mailto:st...@sakoman.com>>
    Signed-off-by: Richard Purdie 
<richard.pur...@linuxfoundation.org<mailto:richard.pur...@linuxfoundation.org>>


I don’t think this is necessarily the culprit as I likely fetched long ago and 
have been using cached content since.

Is this part of that unauthenticated GIT protocol issue?



Regards,

Darcy

Darcy Watkins ::  Senior Staff Engineer, Firmware

SIERRA WIRELESS
Direct  +1 604 233 7989   ::  Fax  +1 604 231 1109  ::  Main  +1 604 231 1100
13811 Wireless Way  :: Richmond, BC Canada V6V 3A4
[M4]
dwatk...@sierrawireless.com<mailto:dwatk...@sierrawireless.com> :: 
www.sierrawireless.com<https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.sierrawireless.com%2F&data=04%7C01%7Cdwatkins%40sierrawireless.com%7C17dc364915194089e3d308d99f29c8f9%7C08059a4c248643dd89e33a747e0dcbe8%7C1%7C0%7C637715824094053498%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=IIeKD8ZOg7no%2Bz2g2C6dXnUCTTGzjCcWWW1dm%2FIqff0%3D&reserved=0>


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#55347): https://lists.yoctoproject.org/g/yocto/message/55347
Mute This Topic: https://lists.yoctoproject.org/mt/86806146/21656
Group Owner: yocto+ow...@lists.yoctoproject.org
Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to