Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 598555 - [awesome] Repository URI unaccessible
Summary: [awesome] Repository URI unaccessible
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Overlays (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Daniel Morlock
URL: https://qa-reports.gentoo.org/output/...
Whiteboard:
Keywords:
Depends on:
Blocks: repository-qa-issues
  Show dependency tree
 
Reported: 2016-10-30 17:05 UTC by Michał Górny
Modified: 2016-11-10 17:43 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-10-30 17:05:06 UTC
Our automated repository checks [1] have detected that the 'awesome'
repository can not be synced.

The following URIs are listed for the repository:

  [     git] https://gitlab.awesome-it.de/overlays/awesome.git

Please verify that the server hosting the repository is working
correctly. If the repository has been moved to a new location or removed
altogether, please let us know to update the record appropriately.

We reserve the right to remove the repository if we do not receive any
reply within 2 weeks.

[1]:https://wiki.gentoo.org/wiki/Project:Repository_mirror_and_CI
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-10-30 17:08:00 UTC
FYI, this is most likely due to recent change in ca-certificates, so you can expect that most Gentoo users won't be able to sync by default.
Comment 2 Daniel Morlock 2016-10-31 10:27:56 UTC
We get A+ ratings from SSLLabs: https://www.ssllabs.com/ssltest/analyze.html?d=gitlab.awesome-it.de&s=37.120.164.191

We know that StartCom is known to be removed in futur but the current certs should be valid until they expire. Was StartCom already removed from the Gentoo ca-certificates?
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-10-31 13:01:53 UTC
I think it was placed under insecure USE flag that is off by default.
Comment 4 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-10-31 13:36:22 UTC
And confirmed:

  if ! use insecure_certs ; then
    # Remove untrusted certs from StartCom and WoSign (bug #598072)
    rm "${c}"/mozilla/StartCom* || die
    rm "${c}"/mozilla/WoSign* || die
  fi
Comment 5 Daniel Morlock 2016-11-10 17:43:21 UTC
We changed our SSL authority to Let's Encrypt Authority X3: https://www.ssllabs.com/ssltest/analyze.html?d=gitlab.awesome-it.de&s=37.120.164.191

The repo URI should now be working again.