Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 529708 - app-text/wgetpaste-2.25-r3 - ERROR: The certificate of 'bpaste.net' is not trusted.
Summary: app-text/wgetpaste-2.25-r3 - ERROR: The certificate of 'bpaste.net' is not tr...
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alex Alexander (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-18 17:04 UTC by Azamat H. Hackimov
Modified: 2015-11-10 15:20 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge-info.txt,5.13 KB, text/plain)
2014-11-18 17:05 UTC, Azamat H. Hackimov
Details
emerge --info wget (emerge-info-wget.txt,5.56 KB, text/plain)
2014-11-19 16:00 UTC, Azamat H. Hackimov
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Azamat H. Hackimov 2014-11-18 17:04:47 UTC
Here output:

wgetpaste --verbose /etc/fuse.conf 
Apparently nothing was received. Perhaps the connection failed.
http://: Invalid host name.
--2014-11-18 22:01:06--  https://bpaste.net/
ERROR: Failed to open cert /etc/ssl/certs/README.RootCerts: (0).
Resolving bpaste.net... 84.22.98.66, 2a02:2770:13:0:21a:4aff:fef3:978
Connecting to bpaste.net|84.22.98.66|:443... connected.
ERROR: The certificate of 'bpaste.net' is not trusted.
ERROR: The certificate of 'bpaste.net' hasn't got a known issuer.

We need new stable app-misc/ca-certificates (latest stable are 20130906-r1).
Comment 1 Azamat H. Hackimov 2014-11-18 17:05:55 UTC
Created attachment 389638 [details]
emerge --info
Comment 2 Ben Kohler gentoo-dev 2014-11-18 21:43:58 UTC
Works fine here on stable with ca-certificates-20130906-r1, can we see "emerge --info wget" (not wgetpaste but wget)?
Comment 3 Azamat H. Hackimov 2014-11-19 16:00:29 UTC
Created attachment 389740 [details]
emerge --info wget

Here output
Comment 4 BobbyK 2014-12-15 18:04:46 UTC
Seeing the same thing here with bpaste.net.  Tried the two other https services (gists and lugons) and had no issues.  Tried upgrading to app-misc/ca-certificates-20140927.3.17.2, though still had issues with bpaste's certificate.
Comment 5 Alex Belykh 2014-12-31 09:16:49 UTC
>Tried upgrading to app-misc/ca-certificates-20140927.3.17.2, though still had issues with bpaste's certificate.

This is due to the required COMODO cert being added only in the 3.17.3 version of nss, as evidenced by the attachment in https://bugzilla.mozilla.org/show_bug.cgi?id=1088147

As ca-certificates in gentoo are being derived from nss, and as hinted by the "3.17.2" in the "20140927.3.17.2" version string, even upgrading to the latest present unstable ca-certificates is not enough to fix it.

Those who are less lazy than me should place a bump request for ca-certificates (and also a stabilization request, for bonus points. ca-certificates package hasn't been stabilized for over a year, and seeing how it creates problems for stable packages like wgetpaste, I can't say I understand its stabilization policy).
Comment 6 Ben Kohler gentoo-dev 2015-04-29 16:26:52 UTC
This only seems to be broken for a very small percentage of users, do you have any more ideas as to what the root cause could be? It's not as simple as "bpaste is broken with stable ca-certificates".  I've tested and it works with all these, on my system:

app-misc/ca-certificates-20140325.3.16.3
app-misc/ca-certificates-20140927.3.17.2
app-misc/ca-certificates-20141019.3.17.4
Comment 7 BobbyK 2015-04-29 22:43:52 UTC
Odd, I can now wgetpaste to bpaste.net with app-misc/ca-certificates-20140927.3.17.2.
Comment 8 Doug Goldstein (RETIRED) gentoo-dev 2015-11-10 15:20:06 UTC
I'm going to consider this issue as resolved since I've tested this on a stable box and was able to paste at https://bpaste.net/show/fa9de6a540ed If this is not actually fixed please re-open.