Re: gcc.gnu.org/sourceware.org SSL issues?

["Maciej W. Rozycki" <macro@codesourcery.com>]

On Tue, 2 Sep 2014, Andrew Pinski wrote:

> >  I've been looking for a statement on this matter somewhere, like on the
> > front pages, but found nothing so has this issue been known?  E.g. the
> > last entry on http://sourceware.org/news.html is from 2005.
> >
> >  Since about yesterday or maybe the day before I've been having problems
> > accessing gcc.gnu.org and sourceware.org sites over SSL, first a security
> > alert is raised about a domain mismatch like:
> >
> > 'You have attempted to establish a connection with "gcc.gnu.org". However,
> > the security certificate presented belongs to "(cygwin.com ,
> > www.cygwin.com)". It is possible, though unlikely, that someone may be
> > trying to intercept your communication with this web site.'
> >
> > and then if I ignore this warning (knowing that cygwin.com is really the
> > same machine; this used to be browser-version-specific for some reason and
> > I used not to care because I don't send any sensitive information to these
> > sites anyway, but now I get it with the newer version too) I get this:
> >
> > 'Error establishing an encrypted connection to gcc.gnu.org. Error Code:
> > -8092.'
> >
> > and the connection then terminates.  Looking up Google reveals that -8092
> > corresponds to SEC_ERROR_KEYGEN_FAIL or "Unable to generate public-private
> > key pair".
> >
> >  Some parts of the sites are accessible unencrypted, however the bugzillas
> > are not and the SSL issue therefore blocks some of my work.  I'll
> > apreciate your assistance.
> 
> What browser are you using?  I have heard some older browser does not
> support the feature that gcc.gnu.org uses for SSL.

 I switch between two versions of Firefox (or Iceape/Iceweasel which is 
how Debian prefers to call it): `Iceape 1.0.9' is my usual choice and for 
sites that are picky/weird I use `Firefox 3.5.19', both according to 
Help->About.

 As I say, till the last weekend all worked just fine.  Hmm, perhaps I 
should switch to Lynx -- I just tried it and it seems just fine, though I 
find accessing bugzilla with it mildly inconvenient.

 Thanks,

  Maciej