uscan ends up with "500 Can't connect :443 (certificate verify failed)"

July 09th, 2012 - 11:40 am ET by Andreas Tille | Report spam
Hi,

at

svn://svn.debian.org/svn/debian-med...mitk/trunk

I did some preparation for a package including a watch file.
Unfortunately I get:

$ uscan --verbose --force-download
http://camitk.imag.fr/download_source.xml https://forge.imag.fr/frs/download.php/[\d]+/camitk-([\d.]+)-Source\.tar\.gz
https://forge.imag.fr/frs/download....rce.tar.gz
Newest version on remote site is 3.0.0, local version is 3.0.0
=> Package is up to date
Newest version on remote site is 3.0.0, local version is 3.0.0
=> Forcing download as requested
uscan warning: In directory ., downloading
https://forge.imag.fr/frs/download....rce.tar.gz failed: 500 Can't connect to forge.imag.fr:443 (certificate verify failed)

Any idea how to successfully get the upstream source using uscan?

Kind regards

Andreas.

http://fam-tille.de


To UNSUBSCRIBE, email to debian-mentors-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/20120709152803.GC18253@an3as.eu
email Follow the discussionReplies 2 repliesReplies Make a reply

Replies

#1 Paul Wise
July 09th, 2012 - 12:10 pm ET | Report spam
On Mon, Jul 9, 2012 at 9:28 AM, Andreas Tille wrote:

Any idea how to successfully get the upstream source using uscan?



If you are unable to get upstream to have their SSL cert signed by a
CA trusted by your system, you can ignore the certificate validity by
setting the PERL_LWP_SSL_VERIFY_HOSTNAME environment variable to 0,
but you should then verify the validity of the tarball using another
method like manual inspection, GPG signatures or fetching from
multiple network endpoints.

bye,
pabs

http://wiki.debian.org/PaulWise


To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/

Similar topics