test_downloadmanager failed due to expired certificate

[rtrepos]

debug: Spawn: command: /usr/bin/curl' chdir: /pub/src/vleexp/vle/build' debug: [-L] debug: [www.vle-project.org/vle-1.0.0.dtd] debug: [-o] debug: [/tmp/vle-1.1.0.dtd] debug: % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 225 100 225 0 0 29debug: 60 0 --:--:-- --:--:-- --:--:-- 2960 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) SSL certificate problem: certificate has expired More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. error: Download: fail to download resources: [/usr/bin/curl] (11196) exited, status=60

[quesnel]

My bad. I will fix the problem. Need few days :(

To continue to use Curl, add '-k' option to disable the check.

[quesnel]

SSL certificate is updated.

Thank you for the report.

[rtrepos]

I have an issue that I think is related to this one :

---

rtrepos@literole:/pub/src/vle/build$ ./tests/utils/test_downloadmanager debug: Spawn: command: /usr/bin/curl' chdir: /pub/src/vle/build' debug: [-L] debug: [www.vle-project.org/vle-1.0.0.dtd] debug: [-o] debug: [/tmp/vle-1.1.0.dtd] debug: % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 225 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-debug: - 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- debug: 0 curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. error: Download: fail to download resources: [/usr/bin/curl] (34619) exited, status=60

With option '-k', it works well.

[quesnel]

The Curl SSL certificates seems too old on your computer.

Try to run:

openssl s_client -showcerts -servername server -connect www.vle-project.org:443 > cacert.pem

Then, Curl must correctly download resources:

curl --cacert cacert.pem https://www.vle-project.org

[rtrepos]

Thanks, it is working on ubuntu perfectly. I have to find a way to make it work on Windows.

[quesnel]

The Curl subprocess fails on Windows too?

[rtrepos]

Yes, and the "-k" option works as well.. Maybe I used the same Windows computer while the old certificate was still online ?

[quesnel]

I think that Curl 7.79.1 (provided in appveyor image) is a bit too old (It comes with a lot of root certificates) for the vle-project.org certificate.

We need either:

• updating the Curl certificate (but how?)

• using the recent Firefox, Edge or Chrome certificates available in appveyor image.

• providing the certificate with VLE distribution tarball or installer..