linux-kernel - Re: fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/': SSL certificate problem: certificate has expired

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sat, 30 May 2020 12:16:12 -0400
From:   Konstantin Ryabitsev <konstantin@...uxfoundation.org>
To:     Toralf Förster <toralf.foerster@....de>
Cc:     Linux Kernel <linux-kernel@...r.kernel.org>
Subject: Re: fatal: unable to access
 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/': SSL
 certificate problem: certificate has expired

On Sat, May 30, 2020 at 03:47:19PM +0200, Toralf Förster wrote:
> > $ git pull
> > 15:07:08.488836 git.c:439               trace: built-in: git pull
> > 15:07:08.504295 run-command.c:663       trace: run_command: git fetch --update-head-ok
> > 15:07:08.506481 git.c:439               trace: built-in: git fetch --update-head-ok
> > 15:07:08.516608 run-command.c:663       trace: run_command: GIT_DIR=.git git-remote-https origin https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
> > fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/': SSL certificate problem: certificate has expired
> >
> > $ curl https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
> > curl: (60) SSL certificate problem: certificate has expired
> > More details here: https://curl.haxx.se/docs/sslcerts.html
> >
> > curl failed to verify the legitimacy of the server and therefore could not
> > establish a secure connection to it. To learn more about this situation and
> > how to fix it, please visit the web page mentioned above.
> >
> 
> Well, the cert is expired: "notAfter=May 30 10:48:38 2020 GMT"

It's one of the intermediaries. We're replacing that cert right now.

-K