Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-18800

dist.apache.org is missing an intermediate certificate

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Fix Version/s: None
    • Component/s: HTTP Server
    • Labels:
      None
    • Project:
      Beam

      Description

      Seems like an intermediate cert is not sent by dist.apache.org and since it was updated recently the old boxes don't have it. Causes issues like this: https://issues.apache.org/jira/browse/BEAM-7821

      Trying to wget something:

      ```
      --2019-07-25 18:28:31-- https://dist.apache.org/repos/dist/dev/beam/2.14.0/python/apache-beam-2.14.0.zip

      Resolving dist.apache.org... 209.188.14.144

      Connecting to dist.apache.org|209.188.14.144|:443... connected.

      ERROR: cannot verify dist.apache.org's certificate, issued by ‘CN=Sectigo RSA Domain Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB’:

        Unable to locally verify the issuer's authority.

      To connect to dist.apache.org insecurely, use `--no-check-certificate'.
      ```

      Cert details: https://www.ssllabs.com/ssltest/analyze.html?d=dist.apache.org

      dist.apache.org needs to be updated to send the intermediate certificate as well

        Attachments

          Activity

            People

            • Assignee:
              johna John Andrunas
              Reporter:
              kedin Anton Kedin
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Review Date: