test_downloadmanager failed due to expired certificate

[rtrepos]

debug: Spawn: command: /usr/bin/curl' chdir: /pub/src/vleexp/vle/build'
debug: [-L]
debug: [www.vle-project.org/vle-1.0.0.dtd]
debug: [-o]
debug: [/tmp/vle-1.1.0.dtd]
debug: % Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 225 100 225 0 0 29debug: 60 0 --:--:-- --:--:-- --:--:-- 2960
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: Download: fail to download resources: [/usr/bin/curl] (11196) exited, status=60

[quesnel]

My bad. I will fix the problem. Need few days :( To continue to use Curl, add '-k' option to disable the check.

[quesnel]

SSL certificate is updated.

Thank you for the report.

[rtrepos]

I have an issue that I think is related to this one :

---

rtrepos@literole:/pub/src/vle/build$ ./tests/utils/test_downloadmanager
debug: Spawn: command: /usr/bin/curl' chdir: /pub/src/vle/build'
debug: [-L]
debug: [www.vle-project.org/vle-1.0.0.dtd]
debug: [-o]
debug: [/tmp/vle-1.1.0.dtd]
debug: % Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 225 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-debug: - 0
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- debug: 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: Download: fail to download resources: [/usr/bin/curl] (34619) exited, status=60

With option '-k', it works well.

[quesnel]

The Curl SSL certificates seems too old on your computer. Try to run: openssl s_client -showcerts -servername server -connect www.vle-project.org:443 > cacert.pem Then, Curl must correctly download resources: curl --cacert cacert.pem https://www.vle-project.org

[rtrepos]

Thanks, it is working on ubuntu perfectly. I have to find a way to make it work on Windows.

[quesnel]

The Curl subprocess fails on Windows too?

[rtrepos]

Yes, and the "-k" option works as well.. Maybe I used the same Windows computer while the old certificate was still online ?

[quesnel]

I think that Curl 7.79.1 (provided in appveyor image) is a bit too old (It comes with a lot of root certificates) for the vle-project.org certificate. We need either: - updating the Curl certificate (but how?) - using the recent Firefox, Edge or Chrome certificates available in appveyor image. - providing the certificate with VLE distribution tarball or installer..