hg.python.org cert changed, update fingerprint
Infra has updated the cert that serves hg.python.org. If you have hardcoded the fingerprint in your slave's hg config you'll need to update it to:
31:d8:79:0f:ca:b5:c4:76:85:ba:61:84:e7:5b:52:4f:78:7d:38:3eAt least one buildbot seems to be affected by this (PPC64LE Fedora).
--David
I have updated the fingerprint in .hgrc.
- David
On Thu, Jun 30, 2016 at 12:01 PM, R. David Murray <rdmurray@bitdance.com> wrote:
Infra has updated the cert that serves hg.python.org. If you have hardcoded the fingerprint in your slave's hg config you'll need to update it to:
31:d8:79:0f:ca:b5:c4:76:85:ba:61:84:e7:5b:52:4f:78:7d:38:3eAt least one buildbot seems to be affected by this (PPC64LE Fedora).
--David
Python-Buildbots mailing list Python-Buildbots@python.org https://mail.python.org/mailman/listinfo/python-buildbots
On Thu, Jun 30, 2016 at 11:50 AM, David Edelsohn <dje.gcc@gmail.com> wrote:
I have updated the fingerprint in .hgrc.
I'm not sure the change stuck, see http://buildbot.python.org/all/builders/PPC64LE%20Fedora%202.7/builds/433
-- Zach
The fingerprint needed to be updated in both PPC64 systems.
I had better look at the Z systems as well.
- David
On Thu, Jun 30, 2016 at 12:59 PM, Zachary Ware <zachary.ware+pydev@gmail.com> wrote:
On Thu, Jun 30, 2016 at 11:50 AM, David Edelsohn <dje.gcc@gmail.com> wrote:
I have updated the fingerprint in .hgrc.
I'm not sure the change stuck, see http://buildbot.python.org/all/builders/PPC64LE%20Fedora%202.7/builds/433
-- Zach
On Thu, 30 Jun 2016 13:16:46 -0400, David Edelsohn <dje.gcc@gmail.com> wrote:
The fingerprint needed to be updated in both PPC64 systems.
I had better look at the Z systems as well.
Out of curiosity, what's the reason for using the hardcoded fingerprint instead of just relying on the normal cert verify?
Also note that once we move to github I don't think you *can* use the fingerprint approach. (I could be wrong, I'm just repeating something I heard on IRC :)
--David
The current Fedora installs are somewhat old because more recent Fedora has been unstable, but they are out of date so the certificates are out of date. Similar for AIX.
The AIX system should be updated shortly.
Thanks, David
On Thu, Jun 30, 2016 at 2:50 PM, R. David Murray <rdmurray@bitdance.com> wrote:
On Thu, 30 Jun 2016 13:16:46 -0400, David Edelsohn <dje.gcc@gmail.com> wrote:
The fingerprint needed to be updated in both PPC64 systems.
I had better look at the Z systems as well.
Out of curiosity, what's the reason for using the hardcoded fingerprint instead of just relying on the normal cert verify?
Also note that once we move to github I don't think you *can* use the fingerprint approach. (I could be wrong, I'm just repeating something I heard on IRC :)
--David
Python-Buildbots mailing list Python-Buildbots@python.org https://mail.python.org/mailman/listinfo/python-buildbots
participants (3)
-
David Edelsohn -
R. David Murray -
Zachary Ware