* Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]
@ 2018-08-19 15:32 Brent Goodrick
2018-08-19 16:51 ` OK again, was: " Robert Klein
0 siblings, 1 reply; 4+ messages in thread
From: Brent Goodrick @ 2018-08-19 15:32 UTC (permalink / raw)
To: emacs-orgmode
Remember to cover the basics, that is, what you expected to happen and
what in fact did happen. You don't know how to make a good report? See
https://orgmode.org/manual/Feedback.html#Feedback
Your bug report will be posted to the Org mailing list.
------------------------------------------------------------------------
This is not a bug with org-mode but seems to be a configuration
problem with the website and/or the underlying git server there:
As of Sun Aug 19 08:27:11 PDT 2018 the clone operation on my Ubuntu
18.04 laptop fails with:
nunyabidness@oryx:/tmp/org-mode.direct$ git clone https://code.orgmode.org/bzg/org-mode.git
Cloning into 'org-mode'...
fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
nunyabidness@oryx:/tmp/org-mode.direct$
I've updated my hosts CA's via the instructions found at
https://stackoverflow.com/a/35824116/257924 to no avail.
I checked my system time is constantly up to date, so it is not a NTP
issue.
I noted that even browsing to the website at https://orgmode.org
required me to add a certificate exception to my browser.
I originally did a git pull in order to get my local installed copy of
org-mode up to date, and got the same error, so I'm reporting the 'git
clone' command above into a /tmp directory just to be sure it is not
due to something I've fouled up in my normal directory.
Emacs : GNU Emacs 25.2.2 (x86_64-pc-linux-gnu, GTK+ Version 3.22.21)
of 2017-09-22, modified by Debian
Package: Org mode version 9.1.7 (release_9.1.7-523-g594b2d @ /home/nunyabidness/emacs_lisp_imported/org-mode/org-mode/lisp/)
current state:
==============
(setq
org-id-locations-file "/home/nunyabidness/that_org_dir/.org-id-locations"
org-tab-first-hook '(org-babel-hide-result-toggle-maybe org-babel-header-arg-expand)
outline-minor-mode-hook '(wikipedia-outline-magic-keys (lambda nil (require (quote outline-magic))))
org-clock-persist-file "/home/nunyabidness/that_org_dir/org-clock-save.el"
org-speed-command-hook '(org-speed-command-activate org-babel-speed-command-activate)
org-occur-hook '(org-first-headline-recenter)
org-metaup-hook '(org-babel-load-in-session-maybe)
org-html-format-drawer-function #[514 "\207" [] 3 "\n\n(fn NAME CONTENTS)"]
org-latex-format-inlinetask-function 'org-latex-format-inlinetask-default-function
org-confirm-shell-link-function 'yes-or-no-p
org-id-link-to-org-use-id t
org-ascii-format-inlinetask-function 'org-ascii-format-inlinetask-default
org-clock-idle-time 10
org-startup-folded nil
org-file-apps '((auto-mode . emacs) ("\\.mm\\'" . default)
("\\.x?html?\\'" lambda (file link) (browse-url-of-file (expand-file-name file))) ("\\.pdf\\'" . default))
org-tab-before-tab-emulation-hook '(org-tempo-complete-tag)
org-export-with-sub-superscripts nil
org-return-follows-link t
org-latex-format-headline-function 'org-latex-format-headline-default-function
org-default-notes-file "/home/nunyabidness/that_org_dir/notes.org"
org-after-todo-state-change-hook '(org-clock-out-if-current)
org-latex-format-drawer-function #[514 "\207" [] 3 "\n\n(fn _ CONTENTS)"]
org-odt-format-headline-function 'org-odt-format-headline-default-function
org-src-mode-hook '(org-src-babel-configure-edit-buffer org-src-mode-configure-edit-buffer)
org-agenda-before-write-hook '(org-agenda-add-entry-text)
org-babel-pre-tangle-hook '(save-buffer)
org-html-head-include-default-style nil
org-mode-hook '(org-tempo-setup org-clock-load bg-org-mode-hook
#[0 "\300\301\302\303\304$\207" [add-hook change-major-mode-hook org-show-all append local] 5]
#[0 "\300\301\302\303\304$\207" [add-hook change-major-mode-hook org-babel-show-result-all append local] 5]
org-babel-result-hide-spec org-babel-hide-all-hashes)
org-refile-targets '((nil :maxlevel . 9) (org-agenda-files :maxlevel . 9))
org-bibtex-headline-format-function #[257 "\300\x01\236A\207" [:title] 3 "\n\n(fn ENTRY)"]
org-archive-hook '(org-attach-archive-delete-maybe)
org-ascii-format-drawer-function #[771 "\x01\207" [] 4 "\n\n(fn NAME CONTENTS WIDTH)"]
org-odt-format-inlinetask-function 'org-odt-format-inlinetask-default-function
org-clock-persist t
org-refile-use-outline-path 'file
org-directory "/home/nunyabidness/that_org_dir"
org-cycle-hook '(org-cycle-hide-archived-subtrees org-cycle-show-empty-lines org-optimize-window-after-visibility-change)
org-plantuml-jar-path "/home/nunyabidness/plantuml/plantuml.jar"
org-edit-src-auto-save-idle-delay 5
org-todo-keywords '((sequence "TODO(t)" "|" "DONE(d)" "SHELVED(s)" "DELEGATED(e)"))
org-babel-tangle-lang-exts '(("python" . "py") ("emacs-lisp" . "el") ("elisp" . "el"))
org-confirm-elisp-link-function 'bg-org-confirm-elisp-link
org-html-htmlize-output-type 'css
org-metadown-hook '(org-babel-pop-to-session-maybe)
outline-mode-hook '((lambda nil (require (quote outline-magic))))
org-odt-format-drawer-function #[514 "\207" [] 3 "\n\n(fn NAME CONTENTS)"]
org-babel-after-execute-hook '(bg-org-babel-after-execute-hook)
org-html-format-headline-function 'org-html-format-headline-default-function
org-link-parameters '(("rmail" :follow org-rmail-open :store org-rmail-store-link)
("mhe" :follow org-mhe-open :store org-mhe-store-link)
("irc" :follow org-irc-visit :store org-irc-store-link :export org-irc-export)
("info" :follow org-info-open :export org-info-export :store org-info-store-link)
("gnus" :follow org-gnus-open :store org-gnus-store-link)
("docview" :follow org-docview-open :export org-docview-export :store org-docview-store-link)
("bibtex" :follow org-bibtex-open :store org-bibtex-store-link)
("bbdb" :follow org-bbdb-open :export org-bbdb-export :complete org-bbdb-complete-link :store org-bbdb-store-link)
("w3m" :store org-w3m-store-link) ("id" :follow org-id-open) ("file+sys") ("file+emacs")
("doi" :follow org--open-doi-link) ("elisp" :follow org--open-elisp-link)
("file" :complete org-file-complete-link) ("ftp" :follow (lambda (path) (browse-url (concat "ftp:" path))))
("help" :follow org--open-help-link) ("http" :follow (lambda (path) (browse-url (concat "http:" path))))
("https" :follow (lambda (path) (browse-url (concat "https:" path))))
("mailto" :follow (lambda (path) (browse-url (concat "mailto:" path))))
("news" :follow (lambda (path) (browse-url (concat "news:" path)))) ("shell" :follow org--open-shell-link))
org-babel-load-languages '((emacs-lisp . t) (python . t) (shell . t) (sqlite . t) (dot . t) (plantuml . t))
org-clock-in-hook '(bg-org-clock-in-hook)
org-html-format-inlinetask-function 'org-html-format-inlinetask-default-function
org-agenda-files "/home/nunyabidness/that_org_dir/org-agenda-files-list-file.txt"
org-clock-out-hook '(org-clock-remove-empty-clock-drawer)
org-confirm-babel-evaluate 'bg-org-confirm-babel-evaluate
org-export-headline-levels 100
org-publish-project-alist '(("my-emacs-lisp-org" :base-directory "~/emacs_lisp/" :publishing-directory "~/public_html/emacs_lisp"
:recursive t :table-of-contents t :base-extension "org" :publishing-function org-html-publish-to-html
:style-include-default nil :section-numbers t :with-sub-superscript nil :html-head
"<link rel=\"stylesheet\" href=\"org.css\" type=\"text/css\" />" :author-info nil :creator-info nil)
("my-emacs-lisp-extra" :base-directory "~/emacs_lisp/" :publishing-directory "~/public_html/emacs_lisp"
:base-extension "css\\|pdf\\|png\\|jpg\\|gif" :publishing-function org-publish-attachment :recursive t
:author nil)
("my-emacs-lisp" :components ("my-emacs-lisp-org" "my-emacs-lisp-extra")))
)
^ permalink raw reply [flat|nested] 4+ messages in thread
* OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]
2018-08-19 15:32 Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)] Brent Goodrick
@ 2018-08-19 16:51 ` Robert Klein
2018-08-25 22:37 ` Brent Goodrick
2018-09-01 15:59 ` Amin Bandali
0 siblings, 2 replies; 4+ messages in thread
From: Robert Klein @ 2018-08-19 16:51 UTC (permalink / raw)
To: Brent Goodrick; +Cc: emacs-orgmode
Hi Brent,
On Sun, 19 Aug 2018 08:32:27 -0700
Brent Goodrick <bgoodr@gmail.com> wrote:
>
> I noted that even browsing to the website at https://orgmode.org
> required me to add a certificate exception to my browser.
[rest deleted]
thanks a lot for the information.
It seems the certificate for the web site expired. I managed to renew
the certificate, so everything should work again as expected.
The automatic renewal of certificates doesn't work at the moment, so we
might encounter the issue again in a couple of months.
I'll try to find a solution in the meantime.
Best regards
Robert
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]
2018-08-19 16:51 ` OK again, was: " Robert Klein
@ 2018-08-25 22:37 ` Brent Goodrick
2018-09-01 15:59 ` Amin Bandali
1 sibling, 0 replies; 4+ messages in thread
From: Brent Goodrick @ 2018-08-25 22:37 UTC (permalink / raw)
To: Robert Klein; +Cc: emacs-orgmode
[-- Attachment #1: Type: text/plain, Size: 770 bytes --]
Thanks Robert. Everything is working perfectly now!
On Sun, Aug 19, 2018 at 9:51 AM, Robert Klein <roklein@roklein.de> wrote:
> Hi Brent,
>
> On Sun, 19 Aug 2018 08:32:27 -0700
> Brent Goodrick <bgoodr@gmail.com> wrote:
>
> >
> > I noted that even browsing to the website at https://orgmode.org
> > required me to add a certificate exception to my browser.
>
> [rest deleted]
>
> thanks a lot for the information.
>
> It seems the certificate for the web site expired. I managed to renew
> the certificate, so everything should work again as expected.
>
> The automatic renewal of certificates doesn't work at the moment, so we
> might encounter the issue again in a couple of months.
>
> I'll try to find a solution in the meantime.
>
> Best regards
> Robert
>
>
>
[-- Attachment #2: Type: text/html, Size: 1338 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]
2018-08-19 16:51 ` OK again, was: " Robert Klein
2018-08-25 22:37 ` Brent Goodrick
@ 2018-09-01 15:59 ` Amin Bandali
1 sibling, 0 replies; 4+ messages in thread
From: Amin Bandali @ 2018-09-01 15:59 UTC (permalink / raw)
To: Robert Klein, Brent Goodrick; +Cc: emacs-orgmode
Hi Robert,
> It seems the certificate for the web site expired. I managed to renew
> the certificate, so everything should work again as expected.
>
> The automatic renewal of certificates doesn't work at the moment, so we
> might encounter the issue again in a couple of months.
>
> I'll try to find a solution in the meantime.
Out of curiosity, what client is used for obtaining the LE certs?
Many of the clients offer a specific option for a "cron mode" or
could be used fairly painlessly in a cron job to periodically
check and renew the certs if necessary.
I'd be happy to try and help out with automating the renewal.
Best,
--
Amin Bandali | GNU webmaster | Grad student, UWaterloo
https://aminb.org | https://gnu.org | https://aminb.org/uw
GnuPG Key: CDDE 75F9 0353 8E71 813C DA27 D1FB A366 27D6 5876
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2018-09-01 16:11 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-08-19 15:32 Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)] Brent Goodrick
2018-08-19 16:51 ` OK again, was: " Robert Klein
2018-08-25 22:37 ` Brent Goodrick
2018-09-01 15:59 ` Amin Bandali
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).