[FFmpeg-trac] #3905(undetermined:new): HTTPS SSL certificate for source.ffmpeg.org is broken
FFmpeg
trac at avcodec.org
Sat Aug 30 01:43:17 CEST 2014
#3905: HTTPS SSL certificate for source.ffmpeg.org is broken
-------------------------------------+-------------------------------------
Reporter: | Type: defect
ahthovaikied | Priority: normal
Status: new | Version:
Component: | unspecified
undetermined | Blocked By:
Keywords: | Reproduced by developer: 0
Blocking: |
Analyzed by developer: 0 |
-------------------------------------+-------------------------------------
The SSL certificate for source.ffmpeg.org as a invalid domain:
{{{
$ git clone https://source.ffmpeg.org/
Clonage dans 'source.ffmpeg.org'...
fatal: unable to access 'https://source.ffmpeg.org/': SSL: certificate
subject name (*.videolan.org) does not match target host name
'source.ffmpeg.org'
}}}
{{{
$ curl -v https://source.ffmpeg.org/
* Hostname was NOT found in DNS cache
* Trying 88.191.250.118...
* Connected to source.ffmpeg.org (88.191.250.118) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using ECDHE-RSA-AES128-GCM-SHA256
* Server certificate:
* subject: OU=Domain Control Validated; OU=Gandi Standard Wildcard
SSL; CN=*.videolan.org
* start date: 2012-10-03 00:00:00 GMT
* expire date: 2015-10-03 23:59:59 GMT
* subjectAltName does not match source.ffmpeg.org
* SSL: no alternative certificate subject name matches target host name
'source.ffmpeg.org'
* Closing connection 0
* SSLv3, TLS alert, Client hello (1):
curl: (51) SSL: no alternative certificate subject name matches target
host name 'source.ffmpeg.org'
}}}
See also https://www.ssllabs.com/ssltest/analyze.html?d=source.ffmpeg.org
As a result users who want to clone FFmpeg source tree, are forced to
either use the insecure {{{git://source.ffmpeg.org/}}}, or a mirror like
https://github.com/FFmpeg/FFmpeg.
--
Ticket URL: <https://trac.ffmpeg.org/ticket/3905>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker
More information about the FFmpeg-trac
mailing list