Use svn to checkout port tree failed

[Nan Xiao]

Hi all,

I follow handbook to try to use svn to checkout the port tree:

# svn checkout https://svn.FreeBSD.org/ports/head /usr/ports
Error validating server certificate for 'https://svn.freebsd.org:443':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
- The certificate hostname does not match.
Certificate information:
- Hostname: FG3K6C3A15800021
- Valid: from Mar 21 09:15:26 2015 GMT until Mar 21 09:15:26 2025 GMT
- Issuer: FG3K6C3A15800021, Fortinet Ltd.
- Fingerprint: 1D:F4:21:20:2F:06:41:45:3F:7A:18:FB:79:F3:BB:30:36:32:22:A3
(R)eject, accept (t)emporarily or accept (p)ermanently? p
svn: E170013: Unable to connect to a repository at URL 'https://svn.freebsd.org/ports/head'
svn: E000054: Error running context: Connection reset by peer

I accept the "Certificate information", but there is still errors.

Could anyone help on this issue? Thanks very much in advance!


Best Regards
Nan Xiao (肖楠)
Skype: xiaonan19830818
Jabber/XMPP: ***@xmpp.ru.net
Telegram: nanxiao
Personal website (Chinese): http://nanxiao.me/
Personal website (English): http://nanxiao.me/en
Chinese DTrace website: http://chinadtrace.org/

[Jon Radel]

Post by Nan Xiao
Hi all,
# svn checkout https://svn.FreeBSD.org/ports/head /usr/ports

<snip>

Post by Nan Xiao
- The certificate hostname does not match.

<snip>

Hmmmm....the mirror I'm currently being sent to

"This is svnmir.nyi.freebsd.org located at NYI.net on the USA East coast."

which is possibly not the mirror you're connecting to (it might help
somebody track down the breakage if you tell us which one you're ending
up at) is providing a perfectly wonderful certificate with the name
"svn.freebsd.org". Even if you've broken your CA root certificate store
somehow, you really shouldn't be getting a hostname mismatch.

So I'd say that either something is broken on at least one mirror at
least temporarily or you're ending up somewhere bad.

What happens if you explicitly specify a different mirror?

[Ben Woods]

Post by Nan Xiao
Hi all,
# svn checkout https://svn.FreeBSD.org/ports/head /usr/ports
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
- The certificate hostname does not match.
- Hostname: FG3K6C3A15800021
- Valid: from Mar 21 09:15:26 2015 GMT until Mar 21 09:15:26 2025 GMT
- Issuer: FG3K6C3A15800021, Fortinet Ltd.
- Fingerprint: 1D:F4:21:20:2F:06:41:45:3F:7A:18:FB:79:F3:BB:30:36:32:22:A3
(R)eject, accept (t)emporarily or accept (p)ermanently? p
svn: E170013: Unable to connect to a repository at URL '
https://svn.freebsd.org/ports/head'
svn: E000054: Error running context: Connection reset by peer
I accept the "Certificate information", but there is still errors.
Could anyone help on this issue? Thanks very much in advance!
Best Regards
Nan Xiao (肖楠)
Skype: xiaonan19830818
Telegram: nanxiao
Personal website (Chinese): http://nanxiao.me/
Personal website (English): http://nanxiao.me/en
Chinese DTrace website: http://chinadtrace.org/

This is likely a result of the SSL certificate for svn.freebsd.org being
changed 6 days ago.
https://lists.freebsd.org/pipermail/freebsd-ops-announce/2016-June/000037.html

Not sure if the mirrors need time to catch up?

Copying in Glen who sent the alert.

Regards,
Ben

[Nan Xiao]

Hi Ben,

Thanks very much for your kind reply!

I get the answer just now, and the root cause is I didn't configure proxy for svn. After following this tutorial,
the "svn checkout" works normally now!

Thanks very much again for your comments!



Best Regards
Nan Xiao (肖楠)
Skype: xiaonan19830818
Jabber/XMPP: ***@xmpp.ru.net
Telegram: nanxiao
Personal website (Chinese): http://nanxiao.me/
Personal website (English): http://nanxiao.me/en
Chinese DTrace website: http://chinadtrace.org/

From: Ben Woods
Date: 2016-06-23 16:33
To: Nan Xiao; Glen Barber
CC: freebsd-questions
Subject: Re: Use svn to checkout port tree failed
On Thursday, 23 June 2016, Nan Xiao <***@chinadtrace.org> wrote:
Hi all,

I follow handbook to try to use svn to checkout the port tree:

# svn checkout https://svn.FreeBSD.org/ports/head /usr/ports
Error validating server certificate for 'https://svn.freebsd.org:443':
- The certificate is not issued by a trusted authority. Use the
fingerprint to validate the certificate manually!
- The certificate hostname does not match.
Certificate information:
- Hostname: FG3K6C3A15800021
- Valid: from Mar 21 09:15:26 2015 GMT until Mar 21 09:15:26 2025 GMT
- Issuer: FG3K6C3A15800021, Fortinet Ltd.
- Fingerprint: 1D:F4:21:20:2F:06:41:45:3F:7A:18:FB:79:F3:BB:30:36:32:22:A3
(R)eject, accept (t)emporarily or accept (p)ermanently? p
svn: E170013: Unable to connect to a repository at URL 'https://svn.freebsd.org/ports/head'
svn: E000054: Error running context: Connection reset by peer

I accept the "Certificate information", but there is still errors.

Could anyone help on this issue? Thanks very much in advance!


Best Regards
Nan Xiao (肖楠)
Skype: xiaonan19830818
Jabber/XMPP: ***@xmpp.ru.net
Telegram: nanxiao
Personal website (Chinese): http://nanxiao.me/
Personal website (English): http://nanxiao.me/en
Chinese DTrace website: http://chinadtrace.org/

This is likely a result of the SSL certificate for svn.freebsd.org being changed 6 days ago.
https://lists.freebsd.org/pipermail/freebsd-ops-announce/2016-June/000037.html

Not sure if the mirrors need time to catch up?

Copying in Glen who sent the alert.

Regards,
Ben


--