From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 11194 invoked by alias); 2 Sep 2014 02:49:20 -0000 Mailing-List: contact overseers-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: , Sender: overseers-owner@sourceware.org Received: (qmail 11178 invoked by uid 89); 2 Sep 2014 02:49:19 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-2.6 required=5.0 tests=BAYES_00,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail-lb0-f172.google.com Received: from mail-lb0-f172.google.com (HELO mail-lb0-f172.google.com) (209.85.217.172) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES128-SHA encrypted) ESMTPS; Tue, 02 Sep 2014 02:49:18 +0000 Received: by mail-lb0-f172.google.com with SMTP id 10so6768920lbg.17 for ; Mon, 01 Sep 2014 19:49:14 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.152.115.232 with SMTP id jr8mr19293187lab.69.1409626154201; Mon, 01 Sep 2014 19:49:14 -0700 (PDT) Received: by 10.25.23.204 with HTTP; Mon, 1 Sep 2014 19:49:14 -0700 (PDT) In-Reply-To: References: Date: Tue, 02 Sep 2014 02:49:00 -0000 Message-ID: Subject: Re: gcc.gnu.org/sourceware.org SSL issues? From: Andrew Pinski To: "Maciej W. Rozycki" Cc: "overseers@sourceware.org" Content-Type: text/plain; charset=UTF-8 X-SW-Source: 2014-q3/txt/msg00115.txt.bz2 On Mon, Sep 1, 2014 at 7:47 PM, Maciej W. Rozycki wrote: > Hi, > > I've been looking for a statement on this matter somewhere, like on the > front pages, but found nothing so has this issue been known? E.g. the > last entry on http://sourceware.org/news.html is from 2005. > > Since about yesterday or maybe the day before I've been having problems > accessing gcc.gnu.org and sourceware.org sites over SSL, first a security > alert is raised about a domain mismatch like: > > 'You have attempted to establish a connection with "gcc.gnu.org". However, > the security certificate presented belongs to "(cygwin.com , > www.cygwin.com)". It is possible, though unlikely, that someone may be > trying to intercept your communication with this web site.' > > and then if I ignore this warning (knowing that cygwin.com is really the > same machine; this used to be browser-version-specific for some reason and > I used not to care because I don't send any sensitive information to these > sites anyway, but now I get it with the newer version too) I get this: > > 'Error establishing an encrypted connection to gcc.gnu.org. Error Code: > -8092.' > > and the connection then terminates. Looking up Google reveals that -8092 > corresponds to SEC_ERROR_KEYGEN_FAIL or "Unable to generate public-private > key pair". > > Some parts of the sites are accessible unencrypted, however the bugzillas > are not and the SSL issue therefore blocks some of my work. I'll > apreciate your assistance. What browser are you using? I have heard some older browser does not support the feature that gcc.gnu.org uses for SSL. Thanks, Andrew > > Thanks, > > Maciej