org-mode git site seems unavailable

org-mode git site seems unavailable

[Colin Baxter]

Doing a "git pull" for org-mode I get the following:

--8<---------------cut here---------------start------------->8---
fatal: unable to access 'https://git.savannah.gnu.org/git/emacs/org-mode.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
--8<---------------cut here---------------end--------------->8---

Does org-mode have a new web-site?

Best wishes,

Colin Baxter.

Re: org-mode git site seems unavailable

[Bastien]

Hi Colin,

Colin Baxter <m43cap@yandex.com> writes:

> Doing a "git pull" for org-mode I get the following:
>
> fatal: unable to access
> 'https://git.savannah.gnu.org/git/emacs/org-mode.git/': server
> certificate verification failed. CAfile:
> /etc/ssl/certs/ca-certificates.crt CRLfile: none

It works fine on my side.  Probably a temporary failure?

-- 
 Bastien

Re: org-mode git site seems unavailable

[Colin Baxter]

Hell Bastien,
>>>>> Bastien  <bzg@gnu.org> writes:

    > Hi Colin, Colin Baxter <m43cap@yandex.com> writes:

    >> Doing a "git pull" for org-mode I get the following:
    >> 
    >> fatal: unable to access
    >> 'https://git.savannah.gnu.org/git/emacs/org-mode.git/': server
    >> certificate verification failed. CAfile:
    >> /etc/ssl/certs/ca-certificates.crt CRLfile: none

    > It works fine on my side.  Probably a temporary failure?

Interesting.

Their certificate would seem certainly to have expired:

--8<---------------cut here---------------start------------->8---

Websites prove their identity via certificates, which are valid for a
set time period. The certificate for git.savannah.gnu.org expired on
18/12/2024.
 
Error code: SEC_ERROR_EXPIRED_CERTIFICATE

Not Before Thu, 19 Sep 2024 22:27:25 GMT
Not After Wed, 18 Dec 2024 22:27:24 GMT

--8<---------------cut here---------------end--------------->8---

Best wishes,

Colin.

Re: org-mode git site seems unavailable

[Bastien Guerry]

Colin Baxter <m43cap@yandex.com> writes:

> Not Before Thu, 19 Sep 2024 22:27:25 GMT
> Not After Wed, 18 Dec 2024 22:27:24 GMT

curl -vvI https://git.savannah.gnu.org/git/emacs/org-mode.git

* SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=git.savannah.gnu.org
*  start date: Dec 22 18:27:24 2024 GMT
*  expire date: Mar 22 18:27:23 2025 GMT
*  subjectAltName: host "git.savannah.gnu.org" matched cert's "git.savannah.gnu.org"
*  issuer: C=US; O=Let's Encrypt; CN=E5
*  SSL certificate verify ok.
* using HTTP/1.1

Perhaps something is cached on your side?

-- 
 Bastien Guerry

Re: org-mode git site seems unavailable

[Colin Baxter]

Dear Bastien,
>>>>> Bastien Guerry <bzg@gnu.org> writes:

    > Colin Baxter <m43cap@yandex.com> writes:
    >> Not Before Thu, 19 Sep 2024 22:27:25 GMT Not After Wed, 18 Dec
    >> 2024 22:27:24 GMT

    > curl -vvI https://git.savannah.gnu.org/git/emacs/org-mode.git

    > * SSL connection using TLSv1.2 / ECDHE-ECDSA-AES256-GCM-SHA384 *
    > ALPN: server accepted http/1.1 * Server certificate: * subject:
    > CN=git.savannah.gnu.org * start date: Dec 22 18:27:24 2024 GMT *
    > expire date: Mar 22 18:27:23 2025 GMT * subjectAltName: host
    > "git.savannah.gnu.org" matched cert's "git.savannah.gnu.org" *
    > issuer: C=US; O=Let's Encrypt; CN=E5 * SSL certificate verify ok.
    > * using HTTP/1.1

    > Perhaps something is cached on your side?

I've now found the cause. Basically my machine is too old - Debian
9.3. The certs need to be updated. I will have to do manually or
just update the whole machine.

In the meantime, putting

--8<---------------cut here---------------start------------->8---

[http]
      [http "https://git.savannah.gnu.org/git/emacs/org-mode.git"]
      sslVerify = false

--8<---------------cut here---------------end--------------->8---

in my git config works. Obviously that's insecure and not a permanent
solution.

Thanks for your help.

Best wishes,

Colin.

Re: org-mode git site seems unavailable

[Bastien Guerry]

Colin Baxter <m43cap@yandex.com> writes:

> I've now found the cause. Basically my machine is too old - Debian
> 9.3. The certs need to be updated. I will have to do manually or
> just update the whole machine.

Thanks for sharing the problem and the solution, perhaps it will be
useful to others!

Cheers,

-- 
 Bastien Guerry