Re: bootstrap fails due to certification expiration

2022-11-20 Thread KO Myung-Hun



Paul Smith wrote:
> On Fri, 2022-11-18 at 20:34 +0900, KO Myung-Hun wrote:
>> Downloaded: 10 files, 546K in 1.9s (283 KB/s)
>> ./bootstrap: autopull.sh failed.
>> -
>>
>> Any idea?
> 
> I'm not sure why it fails but looking at the script it seems you can
> run:
> 
>   ./autopull.sh --skip-po
> 
> to skip the downloading of the PO files.  Maybe that will help?
> 

In this case, make complains like:

-
make[1]: Entering directory 'F:/lang/work/make/m.git/po'
test ! -f ./make.pot || \
  test -z "be.gmo bg.gmo cs.gmo da.gmo de.gmo es.gmo fi.gmo fr.gmo
ga.gmo gl.gmo he.gmo hr.gmo id.gmo it.gmo ja.gmo ko.gmo lt.gmo nl.gmo
pl.gmo pt.gmo pt_BR.gmo ro.gmo ru.gmo sr.gmo sv.gmo tr.gmo uk.gmo vi.gmo
zh_CN.gmo zh_TW.gmo" || F:/usr/local/bin/make.exe be.gmo bg.gmo cs.gmo
da.gmo de.gmo es.gmo fi.gmo fr.gmo ga.gmo gl.gmo he.gmo hr.gmo id.gmo
it.gmo ja.gmo ko.gmo lt.gmo nl.gmo pl.gmo pt.gmo pt_BR.gmo ro.gmo ru.gmo
sr.gmo sv.gmo tr.gmo uk.gmo vi.gmo zh_CN.gmo zh_TW.gmo
make[2]: Entering directory 'F:/lang/work/make/m.git/po'
make[3]: Entering directory 'F:/lang/work/make/m.git/po'
File be.po does not exist. If you are a translator, you can create it
through 'msginit'.
make[3]: *** [Makefile:540: be.po-create] Error 1
make[3]: Leaving directory 'F:/lang/work/make/m.git/po'
make[2]: *** [Makefile:341: be.po] Error 2
make[2]: Leaving directory 'F:/lang/work/make/m.git/po'
make[1]: *** [Makefile:256: stamp-po] Error 2
make[1]: Leaving directory 'F:/lang/work/make/m.git/po'
-

If I copy .po files from po/.reference to po, I can avoid this problem.
But I want to do this automatically and cleanly.

> The best thing to do is to figure out what's wrong with your local root
> certificates that's causing this problem; it's likely only going to get
> worse going forward if you don't update your certificates and continue
> to use older ones.  But, I can't really help you with that.

Fortunately, I've fixed my root certificates problem.

Thanks!

-- 
KO Myung-Hun

Using Mozilla SeaMonkey 2.7.2
Under OS/2 Warp 4 for Korean with FixPak #15
In VirtualBox v6.1.40 on Intel Core i7-3615QM 2.30GHz with 12GB RAM

Korean OS/2 User Community : http://www.os2.kr/




Re: bootstrap fails due to certification expiration

2022-11-20 Thread Paul Smith
On Fri, 2022-11-18 at 20:34 +0900, KO Myung-Hun wrote:
> Downloaded: 10 files, 546K in 1.9s (283 KB/s)
> ./bootstrap: autopull.sh failed.
> -
> 
> Any idea?

I'm not sure why it fails but looking at the script it seems you can
run:

  ./autopull.sh --skip-po

to skip the downloading of the PO files.  Maybe that will help?

The best thing to do is to figure out what's wrong with your local root
certificates that's causing this problem; it's likely only going to get
worse going forward if you don't update your certificates and continue
to use older ones.  But, I can't really help you with that.



Re: bootstrap fails due to certification expiration

2022-11-18 Thread KO Myung-Hun
Hi/2.

Paul Smith wrote:
> On Mon, 2022-11-14 at 13:29 +0900, KO Myung-Hun wrote:
>> ./autopull.sh: getting translations into po/.reference for make...
>> ERROR: cannot verify translationproject.org's certificate, issued by
>> 'CN=R3,O=Let\'s Encrypt,C=US':
>>   Issued certificate has expired.
>> To connect to translationproject.org insecurely, use
>> `--no-check-certificate'.
> 
> I have checked and the translationproject.org's certificate has not
> expired.  When I see this issue it usually means that your local system
> has an incorrect root certificate installed.  See for example:
> 
> https://stackoverflow.com/questions/62107565/wget-and-curl-stopped-working-with-https-wrongly-complain-about-an-expired-cert
> 
> (obviously this is on Ubuntu so it's not exactly your problem, but it's
> probably something like that).
> 
> Unfortunately it doesn't appear there's any command-line way to modify
> the options provided to wget in the autopull.sh script.
> 
> If you're not able to figure out how to fix your root certificates I
> guess you'll have to modify the bootstrap-funclib.sh file and change
> these lines:
> 
>   po_download_command_format=\
>   "wget --mirror --level=1 -nd -nv -A.po -P '%s' \
>https://translationproject.org/latest/%s/;
> 
> to add in the --no-check-certificates option as suggested by the error
> output.

I've tried, and got the following result:

-
./bootstrap: Bootstrapping from checked-out make sources...
Already on 'stable-202207'
Your branch is up to date with 'origin/stable-202207'.
./autopull.sh: consider installing git-merge-changelog from gnulib
./autopull.sh: getting translations into po/.reference for make...
WARNING: cannot verify translationproject.org's certificate, issued by
'CN=R3,O=Let\'s Encrypt,C=US':
  Issued certificate has expired.
Last-modified header missing -- time-stamps turned off.
2022-11-18 20:31:16 URL:https://translationproject.org/latest/make/
[6427/6427] -> "po/.reference/index.html.tmp" [1]
https://translationproject.org/robots.txt:
2022-11-18 20:31:16 ERROR 404: Not Found.
po/.reference/index.html?C=N;O=D.tmp: Bad file number
Cannot write to 'po/.reference/index.html?C=N;O=D.tmp' (Error 0).
WARNING: cannot verify translationproject.org's certificate, issued by
'CN=R3,O=Let\'s Encrypt,C=US':
  Issued certificate has expired.
po/.reference/index.html?C=M;O=A.tmp: Bad file number
Cannot write to 'po/.reference/index.html?C=M;O=A.tmp' (Error 0).
WARNING: cannot verify translationproject.org's certificate, issued by
'CN=R3,O=Let\'s Encrypt,C=US':
  Issued certificate has expired.
po/.reference/index.html?C=S;O=A.tmp: Bad file number
Cannot write to 'po/.reference/index.html?C=S;O=A.tmp' (Error 0).
WARNING: cannot verify translationproject.org's certificate, issued by
'CN=R3,O=Let\'s Encrypt,C=US':
  Issued certificate has expired.
po/.reference/index.html?C=D;O=A.tmp: Bad file number
Cannot write to 'po/.reference/index.html?C=D;O=A.tmp' (Error 0).
WARNING: cannot verify translationproject.org's certificate, issued by
'CN=R3,O=Let\'s Encrypt,C=US':
  Issued certificate has expired.
Last-modified header missing -- time-stamps turned off.
2022-11-18 20:31:22 URL:https://translationproject.org/latest/ [30430]
-> "po/.reference/index.html.tmp" [1]
2022-11-18 20:31:23 URL:https://translationproject.org/latest/make/de.po
[66817/66817] -> "po/.reference/de.po" [1]
2022-11-18 20:31:25 URL:https://translationproject.org/latest/make/gl.po
[57031/57031] -> "po/.reference/gl.po" [1]
2022-11-18 20:31:25 URL:https://translationproject.org/latest/make/he.po
[42054/42054] -> "po/.reference/he.po" [1]
2022-11-18 20:31:26 URL:https://translationproject.org/latest/make/id.po
[62153/62153] -> "po/.reference/id.po" [1]
2022-11-18 20:31:27 URL:https://translationproject.org/latest/make/ja.po
[74715/74715] -> "po/.reference/ja.po" [1]
2022-11-18 20:31:30 URL:https://translationproject.org/latest/make/sr.po
[74975/74975] -> "po/.reference/sr.po" [1]
2022-11-18 20:31:31 URL:https://translationproject.org/latest/make/uk.po
[79629/79629] -> "po/.reference/uk.po" [1]
2022-11-18 20:31:31 URL:https://translationproject.org/latest/make/vi.po
[64663/64663] -> "po/.reference/vi.po" [1]
FINISHED --2022-11-18 20:31:32--
Total wall clock time: 18s
Downloaded: 10 files, 546K in 1.9s (283 KB/s)
./bootstrap: autopull.sh failed.
-

Any idea?

-- 
KO Myung-Hun

Using Mozilla SeaMonkey 2.7.2
Under OS/2 Warp 4 for Korean with FixPak #15
In VirtualBox v6.1.40 on Intel Core i7-3615QM 2.30GHz with 12GB RAM

Korean OS/2 User Community : http://www.os2.kr/




Re: bootstrap fails due to certification expiration

2022-11-15 Thread Paul Smith
On Mon, 2022-11-14 at 13:29 +0900, KO Myung-Hun wrote:
> ./autopull.sh: getting translations into po/.reference for make...
> ERROR: cannot verify translationproject.org's certificate, issued by
> 'CN=R3,O=Let\'s Encrypt,C=US':
>   Issued certificate has expired.
> To connect to translationproject.org insecurely, use
> `--no-check-certificate'.

I have checked and the translationproject.org's certificate has not
expired.  When I see this issue it usually means that your local system
has an incorrect root certificate installed.  See for example:

https://stackoverflow.com/questions/62107565/wget-and-curl-stopped-working-with-https-wrongly-complain-about-an-expired-cert

(obviously this is on Ubuntu so it's not exactly your problem, but it's
probably something like that).

Unfortunately it doesn't appear there's any command-line way to modify
the options provided to wget in the autopull.sh script.

If you're not able to figure out how to fix your root certificates I
guess you'll have to modify the bootstrap-funclib.sh file and change
these lines:

  po_download_command_format=\
  "wget --mirror --level=1 -nd -nv -A.po -P '%s' \
   https://translationproject.org/latest/%s/;

to add in the --no-check-certificates option as suggested by the error
output.