[opensuse-buildservice] Certificate not found

4 Mar 2013

      This is on a 12.2 system where I'm attempting to run osc for the first time:

    $ osc build
    *** certificate verify failed at depth 1
    Subject:  /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
High Assurance CA-3
    Issuer:   /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
High Assurance EV Root CA
    Valid:  Apr  2 12:00:00 2008 GMT - Apr  3 00:00:00 2022 GMT
    Fingerprint(MD5):   C68B9930C8578D416F8C094E6ADB0C90
    Fingerprint(SHA1):  42857855FB0EA43F54C9911E30E7791D8CE82705
    Reason: unable to get local issuer certificate
    Reason: certificate not trusted

    A certificate in the chain failed verification

    Would you like to
    0 - quit (default)
    1 - continue anyways
    2 - trust the server certificate permanently
    9 - review the server certificate

    Enter choice [0129]: 9
    Certificate:
        Data:
            Version: 3 (0x2)
            Serial Number:
                06:c5:3c:43:e4:39:47:ec:d4:7c:66:da:7c:09:b9:1d
        Signature Algorithm: sha1WithRSAEncryption
            Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com,
CN=DigiCert High Assurance CA-3
            Validity
                Not Before: Jan 11 00:00:00 2012 GMT
                Not After : Mar 20 12:00:00 2015 GMT
            Subject: C=US, ST=Utah, L=Provo, O=Novell, Inc., OU=IS&T,
CN=*.opensuse.org
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption
                    Public-Key: (2048 bit)
                    Modulus:
                        00:e0:55:90:91:8d:0d:7c:a8:37:61:59:78:13:23:
                        bf:9e:48:29:b0:8c:c7:cf:da:76:1c:48:7c:cd:eb:
                        49:06:35:85:65:1f:28:dc:b1:f0:78:7b:2d:32:40:
                        b3:16:22:e0:70:f7:eb:f1:a6:51:ea:48:29:03:60:
                        ef:87:ea:24:01:79:83:d2:35:e9:5a:e0:12:14:86:
                        4d:21:02:73:37:8c:da:a9:33:4c:82:94:a7:9d:bf:
                        79:68:c7:fb:86:81:75:2e:cb:82:5a:53:2c:a9:ed:
                        9c:d0:92:06:6a:5b:2e:1b:42:08:24:80:02:3d:2f:
                        ba:30:87:f7:92:f7:62:a2:43:c1:cd:5e:5d:05:6b:
                        e9:ed:5e:bc:cd:1a:e6:b5:2c:9d:04:80:26:31:c2:
                        51:0f:aa:2a:21:34:52:0d:c8:d4:63:fe:77:14:fc:
                        b6:0a:d2:a8:09:99:73:dc:e2:72:57:ba:b6:1c:36:
                        3f:00:81:ba:40:7b:7d:32:dd:45:23:61:15:ca:4f:
                        f2:d2:eb:07:7b:6f:e4:e1:a0:bf:c2:01:9b:76:90:
                        4d:5e:a4:45:4a:d1:7a:3e:07:d4:4d:19:52:fb:d0:
                        c4:94:3b:62:61:f6:8d:10:0b:22:3c:30:51:4b:ee:
                        14:94:08:1f:fe:15:69:6d:6d:71:97:d5:cc:f0:60:
                        e0:19
                    Exponent: 65537 (0x10001)
            X509v3 extensions:
                X509v3 Authority Key Identifier:

keyid:50:EA:73:89:DB:29:FB:10:8F:9E:E5:01:20:D4:DE:79:99:48:83:F7

                X509v3 Subject Key Identifier:
                    E2:7C:7C:F8:A8:67:AF:C4:82:C3:9C:75:29:E3:68:CE:52:F2:03:6F
                X509v3 Subject Alternative Name:
                    DNS:*.opensuse.org, DNS:opensuse.org
                X509v3 Key Usage: critical
                    Digital Signature, Key Encipherment
                X509v3 Extended Key Usage:
                    TLS Web Server Authentication, TLS Web Client Authentication
                X509v3 CRL Distribution Points:

                    Full Name:
                      URI:http://crl3.digicert.com/ca3-g3.crl

                    Full Name:
                      URI:http://crl4.digicert.com/ca3-g3.crl

                X509v3 Certificate Policies:
                    Policy: 2.16.840.1.114412.1.1
                      CPS: http://www.digicert.com/ssl-cps-repository.htm
                      User Notice:
                        Explicit Text:

                Authority Information Access:
                    OCSP - URI:http://ocsp.digicert.com
                    CA Issuers -
URI:http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

                X509v3 Basic Constraints: critical
                    CA:FALSE
        Signature Algorithm: sha1WithRSAEncryption
             bd:2f:fd:a7:e3:1e:c2:7e:8c:19:58:cc:2d:c7:fa:b0:60:0b:
             81:94:5e:1e:3d:94:96:ae:2d:0f:c3:1c:21:6a:ad:2b:1e:dc:
             40:2b:ee:52:8b:0b:f4:83:d5:68:3e:7e:70:05:50:c3:41:ab:
             61:ed:4b:2b:f0:a0:32:6e:51:52:53:ae:79:37:46:27:a0:b3:
             d9:f6:68:bd:02:df:7a:a2:1d:f9:a9:5e:70:1e:17:d3:1f:69:
             a5:3a:95:31:27:e2:aa:f8:94:12:02:3d:d2:93:7e:ae:e8:5b:
             94:06:a7:97:49:50:d4:e9:23:52:d6:64:c1:5f:af:ed:d7:9f:
             cc:54:db:d9:ce:e9:93:1c:4a:6d:8a:76:ed:32:22:cf:d6:67:
             a9:1a:82:5c:2d:ab:44:d4:50:b8:c0:2b:95:24:f6:be:72:b1:
             82:5d:b6:2c:fa:42:55:4e:a4:59:a9:74:f0:6c:ed:a2:ab:e3:
             47:f3:a4:aa:a3:fa:91:cc:7a:db:80:64:cc:2e:54:2d:9b:53:
             ab:74:41:84:3b:d5:2a:1f:86:39:09:7d:5d:b8:40:83:b0:77:
             5f:d2:d8:88:ee:9f:64:25:75:5e:ac:2c:50:c3:61:e4:4a:bd:
             51:57:57:16:32:e9:cf:a7:54:3f:b8:f2:00:4a:fa:18:5a:2f:
             a4:f2:ec:b6

It seems surprising that the cert for opensuse.org is not recognized
on an opensuse.org machine. My .oscrc says:

    [general]
    apiurl = https://api.opensuse.org
    su-wrapper = sudo
    extra-pkgs = vim ncurses-utils
    build_repository = openSUSE_12.2

Version of ca-certificates is 1.19-1.1.

Any thoughts?

-Archie

--
Archie L. Cobbs
-- 
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

[opensuse-buildservice] Certificate not found

Archie Cobbs