linux-kernel - Re: fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/': SSL certificate problem: certificate has expired

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAMwyc-TfqyLZtamqN5ELr-hceySwWZ4TPMYJLtDRPHSuGKmbMQ@mail.gmail.com>
Date:   Sat, 30 May 2020 13:10:06 -0400
From:   Konstantin Ryabitsev <konstantin@...uxfoundation.org>
To:     Toralf Förster <toralf.foerster@....de>
Cc:     Linux Kernel <linux-kernel@...r.kernel.org>
Subject: Re: fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/':
 SSL certificate problem: certificate has expired

On Sat, 30 May 2020 at 12:16, Konstantin Ryabitsev
<konstantin@...uxfoundation.org> wrote:
> > > $ curl https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
> > > curl: (60) SSL certificate problem: certificate has expired
> > > More details here: https://curl.haxx.se/docs/sslcerts.html
> > >
> > > curl failed to verify the legitimacy of the server and therefore could not
> > > establish a secure connection to it. To learn more about this situation and
> > > how to fix it, please visit the web page mentioned above.
> > >
> >
> > Well, the cert is expired: "notAfter=May 30 10:48:38 2020 GMT"
>
> It's one of the intermediaries. We're replacing that cert right now.

The bad intermediate cert is gone now, so you shouldn't see this
problem any more (and the fact that you were seeing it in the first
place suggests that you should update your openssl library, see
https://calnetweb.berkeley.edu/calnet-technologists/incommon-sectigo-certificate-service/addtrust-external-root-expiration-may-2020).

-K