Re: MP Cert Revoked?

2016-10-13 Thread Rainer Müller
On 2016-10-13 17:11, Clemens Lang wrote:
> Hi,
> 
> - On 13 Oct, 2016, at 17:00, Michael Dickens michae...@macports.org wrote:
> 
>> Your connection is not private
>> Attackers might be trying to steal your information from
>> trac.macports.org (for example, passwords, messages, or credit cards).
>> NET::ERR_CERT_REVOKED
> 
> See https://twitter.com/globalsign/status/786505261842247680
> See also http://apple.stackexchange.com/a/257082
> 
> The problem is with the intermediate, not with our certificate, it seems.

Here is a statement from GlobalSign on the matter:

https://downloads.globalsign.com/acton/fs/blocks/showLandingPage/a/2674/p/p-008f/t/page/fm/0

The responses will be cached on your system for the next days. Manual
user action is required to clear the cache if you want to get rid of the
error earlier.

On older versions of the Mac operating system, the command
  crlrefresh rp
might clear the cache in /var/db/crls/*cache*.db, but I had no way to test.

On macOS 10.12 Sierra, the cache appears to be stored in
~/Library/Keychains/*/ocspcache.sqlite3

I do not know any official, documented way from Apple to clear cached
entries in this database. However, I documented some way that worked for
me here:

https://apple.stackexchange.com/questions/257080/how-to-tell-why-macos-thinks-that-a-certificate-is-revoked/257112#257112

Rainer
___
macports-dev mailing list
macports-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/macports-dev


Re: MP Cert Revoked?

2016-10-13 Thread Clemens Lang
Hi,

- On 13 Oct, 2016, at 17:00, Michael Dickens michae...@macports.org wrote:

> Your connection is not private
> Attackers might be trying to steal your information from
> trac.macports.org (for example, passwords, messages, or credit cards).
> NET::ERR_CERT_REVOKED

See https://twitter.com/globalsign/status/786505261842247680
See also http://apple.stackexchange.com/a/257082

The problem is with the intermediate, not with our certificate, it seems.

-- 
Clemens Lang
___
macports-dev mailing list
macports-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/macports-dev


MP Cert Revoked?

2016-10-13 Thread Michael Dickens
I tried logging in to my MP account just now, and am getting the
following error (from Chrome; Safari does not even show this level of
info but it does not allow login either). Other websites work with https
property (not all, but many). Any advice on what's going on? - MLD

{{{
Your connection is not private
Attackers might be trying to steal your information from
trac.macports.org (for example, passwords, messages, or credit cards).
NET::ERR_CERT_REVOKED
[advanced]
trac.macports.org normally uses encryption to protect your information.
When Google Chrome tried to connect to trac.macports.org this time, the
website sent back unusual and incorrect credentials. This may happen
when an attacker is trying to pretend to be trac.macports.org, or a
Wi-Fi sign-in screen has interrupted the connection. Your information is
still secure because Google Chrome stopped the connection before any
data was exchanged.
You cannot visit trac.macports.org right now because this certificate
has been revoked. Network errors and attacks are usually temporary, so
this page will probably work later.
}}}
___
macports-dev mailing list
macports-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/macports-dev


Re: [153826] trunk/dports/net

2016-10-13 Thread Ryan Schmidt

> On Oct 12, 2016, at 4:23 PM, m...@macports.org wrote:
> 
> Revision
> 153826
> Author
> m...@macports.org
> Date
> 2016-10-12 14:23:02 -0700 (Wed, 12 Oct 2016)
> Log Message
> 
> ldns ldns-tools drill: Merge into single Portfile.
> Modified Paths
> 
>   • trunk/dports/net/ldns/Portfile
> Removed Paths
> 
>   • trunk/dports/net/drill/Portfile
>   • trunk/dports/net/ldns-tools/Portfile
> 



> --- trunk/dports/net/ldns/Portfile2016-10-12 14:44:21 UTC (rev 153825)
> +++ trunk/dports/net/ldns/Portfile2016-10-12 21:23:02 UTC (rev 153826)
> 
> @@ -1,18 +1,35 @@
> 
> +# -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; 
> c-basic-offset: 4 -*- vim:fenc=utf-8:ft=tcl:et:sw=4:ts=4:sts=4
> 
>  # $Id$
> 
>  
> 
> -PortSystem 1.0
> 
> +PortSystem  1.0
> 
>  
> 
>  nameldns
> 
> +subport ldns-tools {}
> +subport drill {}
> +
> 
>  version 1.6.17
> 
>  categories  net devel
> 
>  platforms   darwin
> 
>  license BSD
> 
>  maintainers nomaintainer
> 
>  
> 
> -description DNS library in C
> -long_descriptionldns is a library with the aim of simplifying DNS \
> -programming in C. It is heavily based upon the Net::DNS 
> module from \
> -Perl.
> 
> +if {${subport} eq "ldns"} {
> +description DNS library in C
> +long_descriptionldns is a library with the aim of simplifying DNS \
> +programming in C. It is heavily based upon the 
> Net::DNS module from \
> +Perl.
> +}
> +if {${subport} eq "ldns-tools"} {
> +description Tools for working with dns and dnssec.
> +long_descriptionTools as examples to the ldns library. \
> +Useful for debugging/querying dns/dnssec servers.
> +}
> +if {${subport} eq "drill"} {
> +description A dig-style dnssec-aware dns debugging tool
> +long_descriptionDrill is a tool ala dig from BIND. \
> +It was designed with DNSSEC in mind and should be a 
> useful \
> +debugging/query tool for DNSSEC.
> +}

When comparing a single variable to several possible values, consider using a 
switch statement.

Or, when making subports, consider putting the directives that relate to the 
subport into the subport directive, rather than declaring an empty subport 
directive which is a bit more confusing.


> +if {${subport} ne "ldns"} {
> +distnameldns-${version}
> +dist_subdir ldns
> +}

The default for distname is ${name}-${version} and the default for dist_subdir 
is ${name} so now that these are subports in a main port named ldns, these 
lines aren't necessary anymore.


___
macports-dev mailing list
macports-dev@lists.macosforge.org
https://lists.macosforge.org/mailman/listinfo/macports-dev