Mailinglist Archive: opensuse-buildservice (124 mails)

< Previous Next >
[opensuse-buildservice] Certificate not found
  • From: Archie Cobbs <archie@xxxxxxxxxxxx>
  • Date: Mon, 4 Mar 2013 12:56:29 -0600
  • Message-id: <CANSoFxtZWxX_b8mWLUuvRq4NSacPOemrdeN3-S=R5nGObGDHOw@mail.gmail.com>
This is on a 12.2 system where I'm attempting to run osc for the first time:

$ osc build
*** certificate verify failed at depth 1
Subject: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
High Assurance CA-3
Issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert
High Assurance EV Root CA
Valid: Apr 2 12:00:00 2008 GMT - Apr 3 00:00:00 2022 GMT
Fingerprint(MD5): C68B9930C8578D416F8C094E6ADB0C90
Fingerprint(SHA1): 42857855FB0EA43F54C9911E30E7791D8CE82705
Reason: unable to get local issuer certificate
Reason: certificate not trusted

A certificate in the chain failed verification

Would you like to
0 - quit (default)
1 - continue anyways
2 - trust the server certificate permanently
9 - review the server certificate

Enter choice [0129]: 9
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c5:3c:43:e4:39:47:ec:d4:7c:66:da:7c:09:b9:1d
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com,
CN=DigiCert High Assurance CA-3
Validity
Not Before: Jan 11 00:00:00 2012 GMT
Not After : Mar 20 12:00:00 2015 GMT
Subject: C=US, ST=Utah, L=Provo, O=Novell, Inc., OU=IS&T,
CN=*.opensuse.org
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:e0:55:90:91:8d:0d:7c:a8:37:61:59:78:13:23:
bf:9e:48:29:b0:8c:c7:cf:da:76:1c:48:7c:cd:eb:
49:06:35:85:65:1f:28:dc:b1:f0:78:7b:2d:32:40:
b3:16:22:e0:70:f7:eb:f1:a6:51:ea:48:29:03:60:
ef:87:ea:24:01:79:83:d2:35:e9:5a:e0:12:14:86:
4d:21:02:73:37:8c:da:a9:33:4c:82:94:a7:9d:bf:
79:68:c7:fb:86:81:75:2e:cb:82:5a:53:2c:a9:ed:
9c:d0:92:06:6a:5b:2e:1b:42:08:24:80:02:3d:2f:
ba:30:87:f7:92:f7:62:a2:43:c1:cd:5e:5d:05:6b:
e9:ed:5e:bc:cd:1a:e6:b5:2c:9d:04:80:26:31:c2:
51:0f:aa:2a:21:34:52:0d:c8:d4:63:fe:77:14:fc:
b6:0a:d2:a8:09:99:73:dc:e2:72:57:ba:b6:1c:36:
3f:00:81:ba:40:7b:7d:32:dd:45:23:61:15:ca:4f:
f2:d2:eb:07:7b:6f:e4:e1:a0:bf:c2:01:9b:76:90:
4d:5e:a4:45:4a:d1:7a:3e:07:d4:4d:19:52:fb:d0:
c4:94:3b:62:61:f6:8d:10:0b:22:3c:30:51:4b:ee:
14:94:08:1f:fe:15:69:6d:6d:71:97:d5:cc:f0:60:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:

keyid:50:EA:73:89:DB:29:FB:10:8F:9E:E5:01:20:D4:DE:79:99:48:83:F7

X509v3 Subject Key Identifier:
E2:7C:7C:F8:A8:67:AF:C4:82:C3:9C:75:29:E3:68:CE:52:F2:03:6F
X509v3 Subject Alternative Name:
DNS:*.opensuse.org, DNS:opensuse.org
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:

Full Name:
URI:http://crl3.digicert.com/ca3-g3.crl

Full Name:
URI:http://crl4.digicert.com/ca3-g3.crl

X509v3 Certificate Policies:
Policy: 2.16.840.1.114412.1.1
CPS: http://www.digicert.com/ssl-cps-repository.htm
User Notice:
Explicit Text:

Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers -
URI:http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

X509v3 Basic Constraints: critical
CA:FALSE
Signature Algorithm: sha1WithRSAEncryption
bd:2f:fd:a7:e3:1e:c2:7e:8c:19:58:cc:2d:c7:fa:b0:60:0b:
81:94:5e:1e:3d:94:96:ae:2d:0f:c3:1c:21:6a:ad:2b:1e:dc:
40:2b:ee:52:8b:0b:f4:83:d5:68:3e:7e:70:05:50:c3:41:ab:
61:ed:4b:2b:f0:a0:32:6e:51:52:53:ae:79:37:46:27:a0:b3:
d9:f6:68:bd:02:df:7a:a2:1d:f9:a9:5e:70:1e:17:d3:1f:69:
a5:3a:95:31:27:e2:aa:f8:94:12:02:3d:d2:93:7e:ae:e8:5b:
94:06:a7:97:49:50:d4:e9:23:52:d6:64:c1:5f:af:ed:d7:9f:
cc:54:db:d9:ce:e9:93:1c:4a:6d:8a:76:ed:32:22:cf:d6:67:
a9:1a:82:5c:2d:ab:44:d4:50:b8:c0:2b:95:24:f6:be:72:b1:
82:5d:b6:2c:fa:42:55:4e:a4:59:a9:74:f0:6c:ed:a2:ab:e3:
47:f3:a4:aa:a3:fa:91:cc:7a:db:80:64:cc:2e:54:2d:9b:53:
ab:74:41:84:3b:d5:2a:1f:86:39:09:7d:5d:b8:40:83:b0:77:
5f:d2:d8:88:ee:9f:64:25:75:5e:ac:2c:50:c3:61:e4:4a:bd:
51:57:57:16:32:e9:cf:a7:54:3f:b8:f2:00:4a:fa:18:5a:2f:
a4:f2:ec:b6

It seems surprising that the cert for opensuse.org is not recognized
on an opensuse.org machine. My .oscrc says:

[general]
apiurl = https://api.opensuse.org
su-wrapper = sudo
extra-pkgs = vim ncurses-utils
build_repository = openSUSE_12.2

Version of ca-certificates is 1.19-1.1.

Any thoughts?

-Archie

--
Archie L. Cobbs
--
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-buildservice+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups