[FFmpeg-trac] #3905(undetermined:new): HTTPS SSL certificate for source.ffmpeg.org is broken

FFmpeg trac at avcodec.org
Sat Aug 30 01:43:17 CEST 2014


#3905: HTTPS SSL certificate for source.ffmpeg.org is broken
-------------------------------------+-------------------------------------
             Reporter:               |                     Type:  defect
  ahthovaikied                       |                 Priority:  normal
               Status:  new          |                  Version:
            Component:               |  unspecified
  undetermined                       |               Blocked By:
             Keywords:               |  Reproduced by developer:  0
             Blocking:               |
Analyzed by developer:  0            |
-------------------------------------+-------------------------------------
 The SSL certificate for source.ffmpeg.org as a invalid domain:

 {{{
 $ git clone https://source.ffmpeg.org/
 Clonage dans 'source.ffmpeg.org'...
 fatal: unable to access 'https://source.ffmpeg.org/': SSL: certificate
 subject name (*.videolan.org) does not match target host name
 'source.ffmpeg.org'
 }}}

 {{{
 $ curl -v https://source.ffmpeg.org/
 * Hostname was NOT found in DNS cache
 *   Trying 88.191.250.118...
 * Connected to source.ffmpeg.org (88.191.250.118) port 443 (#0)
 * successfully set certificate verify locations:
 *   CAfile: none
   CApath: /etc/ssl/certs
 * SSLv3, TLS handshake, Client hello (1):
 * SSLv3, TLS handshake, Server hello (2):
 * SSLv3, TLS handshake, CERT (11):
 * SSLv3, TLS handshake, Server key exchange (12):
 * SSLv3, TLS handshake, Server finished (14):
 * SSLv3, TLS handshake, Client key exchange (16):
 * SSLv3, TLS change cipher, Client hello (1):
 * SSLv3, TLS handshake, Finished (20):
 * SSLv3, TLS change cipher, Client hello (1):
 * SSLv3, TLS handshake, Finished (20):
 * SSL connection using ECDHE-RSA-AES128-GCM-SHA256
 * Server certificate:
 *        subject: OU=Domain Control Validated; OU=Gandi Standard Wildcard
 SSL; CN=*.videolan.org
 *        start date: 2012-10-03 00:00:00 GMT
 *        expire date: 2015-10-03 23:59:59 GMT
 *        subjectAltName does not match source.ffmpeg.org
 * SSL: no alternative certificate subject name matches target host name
 'source.ffmpeg.org'
 * Closing connection 0
 * SSLv3, TLS alert, Client hello (1):
 curl: (51) SSL: no alternative certificate subject name matches target
 host name 'source.ffmpeg.org'
 }}}

 See also https://www.ssllabs.com/ssltest/analyze.html?d=source.ffmpeg.org

 As a result users who want to clone FFmpeg source tree, are forced to
 either use the insecure {{{git://source.ffmpeg.org/}}}, or a mirror like
 https://github.com/FFmpeg/FFmpeg.

--
Ticket URL: <https://trac.ffmpeg.org/ticket/3905>
FFmpeg <https://ffmpeg.org>
FFmpeg issue tracker


More information about the FFmpeg-trac mailing list