Project

General

Profile

Actions

Bug #5487

open

HTTPS doesn't include full chain.

Added by Aaron Bieber almost 7 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
01/08/2018
Due date:
% Done:

0%

Estimated time:
Chirp Version:
0.4.0
Model affected:
Web
Platform:
Windows
Debug Log:
I read the instructions above:

Description

Tools like wget(1), ftp(1) and curl(1) fail to download tarballs from the chirp_daily directory because the certificate used in the webserver config do not contain the full cert chain:

qbit@slip[0]:~λ curl https://trac.chirp.danplanet.com/chirp_daily/LATEST
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
qbit@slip[60]:~λ
########
qbit@slip[60]:~λ ftp http://trac.chirp.danplanet.com/chirp_daily/LATEST
Trying 50.116.5.251...
Requesting http://trac.chirp.danplanet.com/chirp_daily/LATEST
Redirected to https://trac.chirp.danplanet.com/chirp_daily/LATEST
Trying 50.116.5.251...
Requesting https://trac.chirp.danplanet.com/chirp_daily/LATEST
ftp: SSL write error: certificate verification failed: unable to get local issuer certificate
qbit@slip[1]:~λ

Would it be possible to re-configure the server to use the full certificate chain? This would make it easier for maintainers of OS packages to package chirp for distribution.

No data to display

Actions

Also available in: Atom PDF