On Tue, Jun 21, 2022 at 10:16 PM Alexander Kanavin <[email protected]>
wrote:

> Signed-off-by: Alexander Kanavin <[email protected]>
> ---
>  ...wkmsDRI2Extension-instead-of-driDRI2.patch | 113 ++++++++++++++++++
>  .../{mesa-gl_22.0.3.bb => mesa-gl_22.1.2.bb}  |   0
>  meta/recipes-graphics/mesa/mesa.inc           |   3 +-
>  .../mesa/{mesa_22.0.3.bb => mesa_22.1.2.bb}   |   0
>  4 files changed, 115 insertions(+), 1 deletion(-)
>  create mode 100644
> meta/recipes-graphics/mesa/files/0001-swrast_kms-use-swkmsDRI2Extension-instead-of-driDRI2.patch
>  rename meta/recipes-graphics/mesa/{mesa-gl_22.0.3.bb => mesa-gl_22.1.2.bb}
> (100%)
>  rename meta/recipes-graphics/mesa/{mesa_22.0.3.bb => mesa_22.1.2.bb}
> (100%)
>

FYI: in case more host systems are affected

While building this, I've noticed
WARNING: Failed to fetch URL
https://mesa.freedesktop.org/archive/mesa-22.1.2.tar.xz, attempting MIRRORS
if available

log.do_fetch shows why:

Resolving mesa.freedesktop.org... 147.75.198.156
Connecting to mesa.freedesktop.org|147.75.198.156|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://archive.mesa3d.org//mesa-22.1.2.tar.xz [following]
--2022-06-23 12:29:58--  https://archive.mesa3d.org//mesa-22.1.2.tar.xz
Resolving archive.mesa3d.org... 131.252.210.176,
2610:10:20:722:a800:ff:feda:470f
Connecting to archive.mesa3d.org|131.252.210.176|:443... connected.
ERROR: The certificate of ‘archive.mesa3d.org’ is not trusted.
ERROR: The certificate of ‘archive.mesa3d.org’ doesn't have a known issuer.

In browser it's considered valid certificate with issuer:
Common Name (CN) R3
Organization (O) Let's Encrypt
Organizational Unit (OU) <Not Part Of Certificate>

Do we need ca-certificates update? But I guess it's host issue (this was on
gentoo with ca-certificates 20211016.3.79), on ubuntu 22.10 and debian 11.3
it works fine:

Initiating SSL handshake.
Handshake successful; connected socket 4 to SSL handle 0x000056094b80f8c0
certificate:
  subject: CN=archive.mesa3d.org
  issuer:  CN=R3,O=Let's Encrypt,C=US
X509 certificate successfully verified and matches host archive.mesa3d.org

and in OE built image with:
meta/recipes-support/ca-certificates/ca-certificates_20211016.bb
I didn't get that far yet :)

root@qemux86-64:~# wget
https://mesa.freedesktop.org/archive/mesa-22.1.2.tar.xz
Connecting to mesa.freedesktop.org (147.75.198.156:443)
wget: note: TLS certificate validation not implemented
Connecting to archive.mesa3d.org (131.252.210.176:443)
wget: TLS error from peer (alert code 80): 80
wget: error getting response: Connection reset by peer

The --debug in gentoo wasn't showing the details about certificate just:
Resolving archive.mesa3d.org... 131.252.210.176,
2610:10:20:722:a800:ff:feda:470f
Caching archive.mesa3d.org => 131.252.210.176
2610:10:20:722:a800:ff:feda:470f
Connecting to archive.mesa3d.org|131.252.210.176|:443... connected.
Created socket 4.
Releasing 0x000055e5d4567460 (new refcount 1).
ERROR: The certificate of ‘archive.mesa3d.org’ is not trusted.
ERROR: The certificate of ‘archive.mesa3d.org’ doesn't have a known issuer.

Then I've disabled gnutls support in wget and now net-misc/wget-1.21.3-r1
works fine again (like in ubuntu/debian):

Resolving archive.mesa3d.org... 131.252.210.176,
2610:10:20:722:a800:ff:feda:470f
Caching archive.mesa3d.org => 131.252.210.176
2610:10:20:722:a800:ff:feda:470f
Connecting to archive.mesa3d.org|131.252.210.176|:443... connected.
Created socket 4.
Releasing 0x000055903f10ebd0 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 4 to SSL handle 0x000055903f0f4e50
certificate:
  subject: CN=archive.mesa3d.org
  issuer:  CN=R3,O=Let's Encrypt,C=US
X509 certificate successfully verified and matches host archive.mesa3d.org

I'll check how gnutls USE flag affects this, just in case someone is seeing
a lot of downloads from mirror, check your wget.

Cheers,
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#167274): 
https://lists.openembedded.org/g/openembedded-core/message/167274
Mute This Topic: https://lists.openembedded.org/mt/91908380/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to