Homebrew / legacy-homebrew

💀 The former home of Homebrew/homebrew (deprecated)
https://brew.sh
26.97k stars 11.34k forks source link

lrzsz: upstream's SSL certificates expired #50096

Closed ilovezfs closed 8 years ago

ilovezfs commented 8 years ago
curl: (60) SSL certificate problem: Invalid certificate chain
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
Error: Failed to download resource "lrzsz"
Download failed: https://ohse.de/uwe/releases/lrzsz-0.12.20.tar.gz
MikeMcQuaid commented 8 years ago

PR to make it use non-SSL seems like the way forward.

DomT4 commented 8 years ago

We're actually already using the plaintext link; the redirect is upstream's problem:

==> Downloading http://www.ohse.de/uwe/releases/lrzsz-0.12.20.tar.gz
==> Downloading from https://ohse.de/uwe/releases/lrzsz-0.12.20.tar.gz
DomT4 commented 8 years ago

The upstream cert expired at the start of December. Not sure there's much we can do here beside finding a mirror or removing the formula.

DomT4 commented 8 years ago

The cert has been broken for 3 months and the last release of this software was December 1998. I think there's ground enough for :skull: here.

DomT4 commented 8 years ago

Apparently people are going to keep filing PRs to keep this alive, so I won't take an :hocho: to it just yet. Replaced the URL with a Homebrew-backed one in https://github.com/Homebrew/homebrew/commit/6cc7482ffc37ff1b582549dde3a4e5548e96d4a6 with comments.