Bug 598555 – [awesome] Repository URI unaccessible

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Michał Górny 2016-10-30 17:05:06 UTC]

Our automated repository checks [1] have detected that the 'awesome'
repository can not be synced.

The following URIs are listed for the repository:

  [     git] https://gitlab.awesome-it.de/overlays/awesome.git

Please verify that the server hosting the repository is working
correctly. If the repository has been moved to a new location or removed
altogether, please let us know to update the record appropriately.

We reserve the right to remove the repository if we do not receive any
reply within 2 weeks.

[1]:https://wiki.gentoo.org/wiki/Project:Repository_mirror_and_CI

[Comment 1 Michał Górny 2016-10-30 17:08:00 UTC]

FYI, this is most likely due to recent change in ca-certificates, so you can expect that most Gentoo users won't be able to sync by default.

[Comment 2 Daniel Morlock 2016-10-31 10:27:56 UTC]

We get A+ ratings from SSLLabs: https://www.ssllabs.com/ssltest/analyze.html?d=gitlab.awesome-it.de&s=37.120.164.191

We know that StartCom is known to be removed in futur but the current certs should be valid until they expire. Was StartCom already removed from the Gentoo ca-certificates?

[Comment 3 Michał Górny 2016-10-31 13:01:53 UTC]

I think it was placed under insecure USE flag that is off by default.

[Comment 4 Michał Górny 2016-10-31 13:36:22 UTC]

And confirmed:

  if ! use insecure_certs ; then
    # Remove untrusted certs from StartCom and WoSign (bug #598072)
    rm "${c}"/mozilla/StartCom* || die
    rm "${c}"/mozilla/WoSign* || die
  fi

[Comment 5 Daniel Morlock 2016-11-10 17:43:21 UTC]

We changed our SSL authority to Let's Encrypt Authority X3: https://www.ssllabs.com/ssltest/analyze.html?d=gitlab.awesome-it.de&s=37.120.164.191

The repo URI should now be working again.