Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]

Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]

[Brent Goodrick]

Remember to cover the basics, that is, what you expected to happen and
what in fact did happen.  You don't know how to make a good report?  See

     https://orgmode.org/manual/Feedback.html#Feedback

Your bug report will be posted to the Org mailing list.
------------------------------------------------------------------------
This is not a bug with org-mode but seems to be a configuration
problem with the website and/or the underlying git server there:

As of Sun Aug 19 08:27:11 PDT 2018 the clone operation on my Ubuntu
18.04 laptop fails with:

nunyabidness@oryx:/tmp/org-mode.direct$ git clone https://code.orgmode.org/bzg/org-mode.git
Cloning into 'org-mode'...
fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
nunyabidness@oryx:/tmp/org-mode.direct$

I've updated my hosts CA's via the instructions found at
https://stackoverflow.com/a/35824116/257924 to no avail.

I checked my system time is constantly up to date, so it is not a NTP
issue.

I noted that even browsing to the website at https://orgmode.org
required me to add a certificate exception to my browser.

I originally did a git pull in order to get my local installed copy of
org-mode up to date, and got the same error, so I'm reporting the 'git
clone' command above into a /tmp directory just to be sure it is not
due to something I've fouled up in my normal directory.


Emacs  : GNU Emacs 25.2.2 (x86_64-pc-linux-gnu, GTK+ Version 3.22.21)
 of 2017-09-22, modified by Debian
Package: Org mode version 9.1.7 (release_9.1.7-523-g594b2d @ /home/nunyabidness/emacs_lisp_imported/org-mode/org-mode/lisp/)

current state:
==============
(setq
 org-id-locations-file "/home/nunyabidness/that_org_dir/.org-id-locations"
 org-tab-first-hook '(org-babel-hide-result-toggle-maybe org-babel-header-arg-expand)
 outline-minor-mode-hook '(wikipedia-outline-magic-keys (lambda nil (require (quote outline-magic))))
 org-clock-persist-file "/home/nunyabidness/that_org_dir/org-clock-save.el"
 org-speed-command-hook '(org-speed-command-activate org-babel-speed-command-activate)
 org-occur-hook '(org-first-headline-recenter)
 org-metaup-hook '(org-babel-load-in-session-maybe)
 org-html-format-drawer-function #[514 "\207" [] 3 "\n\n(fn NAME CONTENTS)"]
 org-latex-format-inlinetask-function 'org-latex-format-inlinetask-default-function
 org-confirm-shell-link-function 'yes-or-no-p
 org-id-link-to-org-use-id t
 org-ascii-format-inlinetask-function 'org-ascii-format-inlinetask-default
 org-clock-idle-time 10
 org-startup-folded nil
 org-file-apps '((auto-mode . emacs) ("\\.mm\\'" . default)
		 ("\\.x?html?\\'" lambda (file link) (browse-url-of-file (expand-file-name file))) ("\\.pdf\\'" . default))
 org-tab-before-tab-emulation-hook '(org-tempo-complete-tag)
 org-export-with-sub-superscripts nil
 org-return-follows-link t
 org-latex-format-headline-function 'org-latex-format-headline-default-function
 org-default-notes-file "/home/nunyabidness/that_org_dir/notes.org"
 org-after-todo-state-change-hook '(org-clock-out-if-current)
 org-latex-format-drawer-function #[514 "\207" [] 3 "\n\n(fn _ CONTENTS)"]
 org-odt-format-headline-function 'org-odt-format-headline-default-function
 org-src-mode-hook '(org-src-babel-configure-edit-buffer org-src-mode-configure-edit-buffer)
 org-agenda-before-write-hook '(org-agenda-add-entry-text)
 org-babel-pre-tangle-hook '(save-buffer)
 org-html-head-include-default-style nil
 org-mode-hook '(org-tempo-setup org-clock-load bg-org-mode-hook
		 #[0 "\300\301\302\303\304$\207" [add-hook change-major-mode-hook org-show-all append local] 5]
		 #[0 "\300\301\302\303\304$\207" [add-hook change-major-mode-hook org-babel-show-result-all append local] 5]
		 org-babel-result-hide-spec org-babel-hide-all-hashes)
 org-refile-targets '((nil :maxlevel . 9) (org-agenda-files :maxlevel . 9))
 org-bibtex-headline-format-function #[257 "\300\x01\236A\207" [:title] 3 "\n\n(fn ENTRY)"]
 org-archive-hook '(org-attach-archive-delete-maybe)
 org-ascii-format-drawer-function #[771 "\x01\207" [] 4 "\n\n(fn NAME CONTENTS WIDTH)"]
 org-odt-format-inlinetask-function 'org-odt-format-inlinetask-default-function
 org-clock-persist t
 org-refile-use-outline-path 'file
 org-directory "/home/nunyabidness/that_org_dir"
 org-cycle-hook '(org-cycle-hide-archived-subtrees org-cycle-show-empty-lines org-optimize-window-after-visibility-change)
 org-plantuml-jar-path "/home/nunyabidness/plantuml/plantuml.jar"
 org-edit-src-auto-save-idle-delay 5
 org-todo-keywords '((sequence "TODO(t)" "|" "DONE(d)" "SHELVED(s)" "DELEGATED(e)"))
 org-babel-tangle-lang-exts '(("python" . "py") ("emacs-lisp" . "el") ("elisp" . "el"))
 org-confirm-elisp-link-function 'bg-org-confirm-elisp-link
 org-html-htmlize-output-type 'css
 org-metadown-hook '(org-babel-pop-to-session-maybe)
 outline-mode-hook '((lambda nil (require (quote outline-magic))))
 org-odt-format-drawer-function #[514 "\207" [] 3 "\n\n(fn NAME CONTENTS)"]
 org-babel-after-execute-hook '(bg-org-babel-after-execute-hook)
 org-html-format-headline-function 'org-html-format-headline-default-function
 org-link-parameters '(("rmail" :follow org-rmail-open :store org-rmail-store-link)
		       ("mhe" :follow org-mhe-open :store org-mhe-store-link)
		       ("irc" :follow org-irc-visit :store org-irc-store-link :export org-irc-export)
		       ("info" :follow org-info-open :export org-info-export :store org-info-store-link)
		       ("gnus" :follow org-gnus-open :store org-gnus-store-link)
		       ("docview" :follow org-docview-open :export org-docview-export :store org-docview-store-link)
		       ("bibtex" :follow org-bibtex-open :store org-bibtex-store-link)
		       ("bbdb" :follow org-bbdb-open :export org-bbdb-export :complete org-bbdb-complete-link :store org-bbdb-store-link)
		       ("w3m" :store org-w3m-store-link) ("id" :follow org-id-open) ("file+sys") ("file+emacs")
		       ("doi" :follow org--open-doi-link) ("elisp" :follow org--open-elisp-link)
		       ("file" :complete org-file-complete-link) ("ftp" :follow (lambda (path) (browse-url (concat "ftp:" path))))
		       ("help" :follow org--open-help-link) ("http" :follow (lambda (path) (browse-url (concat "http:" path))))
		       ("https" :follow (lambda (path) (browse-url (concat "https:" path))))
		       ("mailto" :follow (lambda (path) (browse-url (concat "mailto:" path))))
		       ("news" :follow (lambda (path) (browse-url (concat "news:" path)))) ("shell" :follow org--open-shell-link))
 org-babel-load-languages '((emacs-lisp . t) (python . t) (shell . t) (sqlite . t) (dot . t) (plantuml . t))
 org-clock-in-hook '(bg-org-clock-in-hook)
 org-html-format-inlinetask-function 'org-html-format-inlinetask-default-function
 org-agenda-files "/home/nunyabidness/that_org_dir/org-agenda-files-list-file.txt"
 org-clock-out-hook '(org-clock-remove-empty-clock-drawer)
 org-confirm-babel-evaluate 'bg-org-confirm-babel-evaluate
 org-export-headline-levels 100
 org-publish-project-alist '(("my-emacs-lisp-org" :base-directory "~/emacs_lisp/" :publishing-directory "~/public_html/emacs_lisp"
			      :recursive t :table-of-contents t :base-extension "org" :publishing-function org-html-publish-to-html
			      :style-include-default nil :section-numbers t :with-sub-superscript nil :html-head
			      "<link rel=\"stylesheet\" href=\"org.css\" type=\"text/css\" />" :author-info nil :creator-info nil)
			     ("my-emacs-lisp-extra" :base-directory "~/emacs_lisp/" :publishing-directory "~/public_html/emacs_lisp"
			      :base-extension "css\\|pdf\\|png\\|jpg\\|gif" :publishing-function org-publish-attachment :recursive t
			      :author nil)
			     ("my-emacs-lisp" :components ("my-emacs-lisp-org" "my-emacs-lisp-extra")))
 )

OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]

[Robert Klein]

Hi Brent,

On Sun, 19 Aug 2018 08:32:27 -0700
Brent Goodrick <bgoodr@gmail.com> wrote:

> 
> I noted that even browsing to the website at https://orgmode.org
> required me to add a certificate exception to my browser.

[rest deleted]

thanks a lot for the information.

It seems the certificate for the web site expired.  I managed to renew
the certificate, so everything should work again as expected.

The automatic renewal of certificates doesn't work at the moment, so we
might encounter the issue again in a couple of months.

I'll try to find a solution in the meantime.

Best regards
Robert

Re: OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]

[Brent Goodrick]

[-- Attachment #1: Type: text/plain, Size: 770 bytes --]

Thanks Robert.  Everything is working perfectly now!

On Sun, Aug 19, 2018 at 9:51 AM, Robert Klein <roklein@roklein.de> wrote:

> Hi Brent,
>
> On Sun, 19 Aug 2018 08:32:27 -0700
> Brent Goodrick <bgoodr@gmail.com> wrote:
>
> >
> > I noted that even browsing to the website at https://orgmode.org
> > required me to add a certificate exception to my browser.
>
> [rest deleted]
>
> thanks a lot for the information.
>
> It seems the certificate for the web site expired.  I managed to renew
> the certificate, so everything should work again as expected.
>
> The automatic renewal of certificates doesn't work at the moment, so we
> might encounter the issue again in a couple of months.
>
> I'll try to find a solution in the meantime.
>
> Best regards
> Robert
>
>
>

[-- Attachment #2: Type: text/html, Size: 1338 bytes --]

Re: OK again, was: Re: Bug: git clone https://code.orgmode.org/bzg/org-mode.git fails with fatal: unable to access 'https://code.orgmode.org/bzg/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none [9.1.7 (release_9.1.7-523-g594b2d @ /home/brentg/emacs_lisp_imported/org-mode/org-mode/lisp/)]

[Amin Bandali]

Hi Robert,

> It seems the certificate for the web site expired.  I managed to renew
> the certificate, so everything should work again as expected.
>
> The automatic renewal of certificates doesn't work at the moment, so we
> might encounter the issue again in a couple of months.
>
> I'll try to find a solution in the meantime.

Out of curiosity, what client is used for obtaining the LE certs?
Many of the clients offer a specific option for a "cron mode" or
could be used fairly painlessly in a cron job to periodically
check and renew the certs if necessary.

I'd be happy to try and help out with automating the renewal.

Best,

-- 
Amin Bandali      |  GNU webmaster  | Grad student, UWaterloo
https://aminb.org | https://gnu.org |    https://aminb.org/uw
GnuPG Key: CDDE 75F9 0353 8E71 813C  DA27 D1FB A366 27D6 5876