Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: [Original edit by KevinMcGrail] adding the current cert for the docs

Dealing with SVN cert changes

Infrastructure have changed may change the SSL certificate used for svn.apache.org repeatedly. Since we use a an "https" SVN external, this causes problems: all users of SVN will be presented with a warning like the following:

No Format
svn up

Fetching external item into 'rulesrc'
Error validating server certificate for 'https://svn.apache.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: svn*.apache.org
 - Valid: from Fri, 07 JanFeb 262014 1400:1800:55 200700 GMT until Jan 26 14:18:55 2009 Thu, 07 Apr 2016 23:59:59 GMT
 - Issuer: http://www.starfieldtech.com/repositoryThawte, Starfield Technologies, Inc., Scottsdale, Arizona, US
 - Fingerprint: a7dd:a573:3f02:1ae6:ae4f:bb9e:98fc:b248:f382:eccc:9161:1b68:63f6:2998:2df0:e8aa:5866:b643:5384:2878
(R)eject, accept (t)emporarily or accept (p)ermanently? p
External at revision 513302.

At revision 513302.

...

No Format

sudo su - release
[type password]
cd /home/release/versions/cvshead
svn up

Fetching external item into 'rulesrc'svn info https://svn.apache.org/repos/asf/spamassassin/trunk
Error validating server certificate for 'https://svn.apache.org:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: svn*.apache.org
 - Valid: from Jan 26 14:18:55 2007 GMT until Jan 26 14:18:55 2009Fri, 07 Feb 2014 00:00:00 GMT until Thu, 07 Apr 2016 23:59:59 GMT
 - Issuer: http://www.starfieldtech.com/repositoryThawte, Starfield Technologies, Inc., Scottsdale, Arizona, US
 - Fingerprint: a7dd:a573:3f02:1ae6:ae4f:bb9e:98fc:b248:f382:eccc:9161:1b68:63f6:2998:2df0:e8aa:5866:b643:5384:2878
(R)eject, accept (t)emporarily or accept (p)ermanently? p
External at revision 513302.

At revision 513302.

[CTRL-D to log out of "release" uid]exit

cdrepeat ~release
sudothe tarabove cffor - .subversion/auth | ( cd ~automc ; sudo tar xfp - )
sudo chown -R automc ~automc/.subversion/auth

sudo tar cf - .subversion/auth | ( cd ~bbmass ; sudo tar xfp - )
sudo chown -R bbmass ~bbmass/.subversion/auth

sudo tar cf - .subversion/auth | ( cd ~buildbot ; sudo tar xfp - )
sudo chown -R buildbot ~buildbot/.subversion/auththe automc, updatesd, bbmass and buildbot accounts.