pentoo / pentoo-historical

read-only historical backup of pentoo from googlecode
https://code.google.com/p/pentoo/
2 stars 1 forks source link

Fetch failed for 'app-exploits/packetstormexploits' - invalid certificate #360

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. emerge -fuDN world

Original issue reported on code.google.com by willard....@gmail.com on 10 Jul 2015 at 12:07

Attachments:

GoogleCodeExporter commented 9 years ago
well, yeah. Read the build log. Wget (which is a default downloader) can't 
verify the cert for some reason. As a workaround, you need to download this 
file manually from the same location (add --no-check-certificate) and place it 
to the /usr/portage/distfiles directory.

I sent a mail to Todd Jarvis but he didn't reply. Feel free to contact 
packetstormsecurity yourself as well.

Original comment by blshkv on 10 Jul 2015 at 4:40

GoogleCodeExporter commented 9 years ago
The problem is with the chain of certs:

Extra download
Fingerprint: 27ac9369faf25207bb2627cefaccbe4ef9c319b8
RSA 2048 bits (e 65537) / SHA256withRSA
Go Daddy Root Certificate Authority - G2   Self-signed

And here is the solution for that:
https://community.qualys.com/thread/12331

Original comment by blshkv on 10 Jul 2015 at 4:57

GoogleCodeExporter commented 9 years ago
The solution goes to the web site provider, not us as users. It seems the only 
answer here is to keep banging on packetstormsecurity's door until someone 
wakes up.

Original comment by willard....@gmail.com on 11 Jul 2015 at 12:26

blshkv commented 9 years ago

https://www.sslshopper.com/ssl-checker.html#hostname=dl.packetstormsecurity.net

blshkv commented 8 years ago

https://github.com/pentoo/pentoo-overlay/issues/89