On 09/02/2024 13:34, Jarek Prokop wrote:
Since the error from the scratch build says "invalid CA certificate" I
thought to use some openssl "verification" command,
this one seems like I'm on the right path.
I have tried more permutations of the command with certificates
available in the `spec/ssl/` directory, including using `-untrusted`
with various certs, all seem to fail the same.
Any idea what's up or how to fix it?
As you say it doesn't like the CA certificate:
% openssl verify -verbose -CAfile ca-cert.pem server-cert.pem
CN=ca_mysql2gem
error 79 at 1 depth lookup: invalid CA certificate
error server-cert.pem: verification failed
That CA certificate doesn't have the CA:TRUE constraint set
which might be the problem?
Tom
--
Tom Hughes (t...@compton.nu)
http://compton.nu/
--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
