[Bug 4343] New: hg clone gives certificate verify error when it possibly shouldn't

[mercurial-bugs at selenic.com]

http://bz.selenic.com/show_bug.cgi?id=4343

          Priority: normal
            Bug ID: 4343
                CC: mercurial-devel at selenic.com
          Assignee: bugzilla at selenic.com
           Summary: hg clone gives certificate verify error when it
                    possibly shouldn't
          Severity: bug
    Classification: Unclassified
                OS: Linux
          Reporter: faheem at faheem.info
          Hardware: PC
            Status: UNCONFIRMED
           Version: 3.1
         Component: Mercurial
           Product: Mercurial

Trying to `hg clone` from Sean Farley's site gives

faheem at orwell:/tmp$ hg clone https://smf.io/mutable-history
abort: error: _ssl.c:504: error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

However, at least chromium seems fine - it reports it can verify the site.

SMF tells me he uses startssl. That means nothing to me, but hopefully it measn
something to somebody.

I just found the similar http://bz.selenic.com/show_bug.cgi?id=3760, and I also
get:

faheem at orwell:/tmp$ wget https://smf.io/mutable-history
--2014-08-22 03:05:27--  https://smf.io/mutable-history
p11-kit: invalid config filename, will be ignored in the future:
/etc/pkcs11/modules/gnome-keyring-module
Resolving smf.io (smf.io)... 66.251.232.60
Connecting to smf.io (smf.io)|66.251.232.60|:443... connected.
ERROR: The certificate of `smf.io' is not trusted.
ERROR: The certificate of `smf.io' hasn't got a known issuer.

Since I've already written this, I'm submitting. Feel free to close if similar
reasons apply.

                                                                Regards, Faheem

-- 
You are receiving this mail because:
You are on the CC list for the bug.