[Bug 5462] New: Certificate for mercurial-scm.org SMTP server is invalid

mercurial-bugs at mercurial-scm.org mercurial-bugs at mercurial-scm.org
Tue Jan 10 22:30:21 UTC 2017


https://bz.mercurial-scm.org/show_bug.cgi?id=5462

            Bug ID: 5462
           Summary: Certificate for mercurial-scm.org SMTP server is
                    invalid
           Product: Mercurial
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: UNCONFIRMED
          Severity: feature
          Priority: wish
         Component: infrastructure
          Assignee: bugzilla at mercurial-scm.org
          Reporter: av6 at dwimlabs.net
                CC: kbullock+mercurial at ringworld.org,
                    mercurial-devel at selenic.com

$ openssl s_client -connect mercurial-scm.org:25 -starttls smtp
CONNECTED(00000003)
depth=0 CN = test.selenic.com
verify error:num=18:self signed certificate
verify return:1
depth=0 CN = test.selenic.com
verify return:1
---
Certificate chain
 0 s:/CN=test.selenic.com
   i:/CN=test.selenic.com
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=test.selenic.com
issuer=/CN=test.selenic.com
...

This produces notices like these:
postfix/smtp[9941]: Untrusted TLS connection established to
mercurial-scm.org[192.81.134.36]:25: TLSv1.2 with cipher
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
postfix/smtp[9937]: Untrusted TLS connection established to
mercurial-scm.org[2600:3c01::f03c:91ff:fedb:76b6]:25: TLSv1.2 with cipher
ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)

So sending emails to m-s.o obviously works, but it would be nice to fix the
certificate issue.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Mercurial-devel mailing list