[GRASS-user] Download Server Certificate Authentication

[Glynn Clements]

Rich Shepard wrote:

> > I don't know how to get rid of an outdated certificate in a local SVN copy
> > but the OSGeo SSL Certificate is correct after it has been renewed.
> 
>    OK. I'll continue to accept temporarily

I'd suggest that you don't do that. There is nothing wrong with the
current certificate. If it doesn't verify, either there's a
configuration problem on your system, or you're being MitM'd (I'd
guess at the former, but ignoring validation failures entirely defeats
the point of using SSL).

The certificate chain is AddTrust -> Comodo -> osgeo.org:

        Subject: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO High-Assurance Secure Server CA
        Subject: C=US/postalCode=97005-2343, ST=OR, L=Beaverton/street=14525 SW Millikan #42523, O=Open Source Geospatial Foundation, OU=Comodo SGC SSL Wildcard, CN=*.osgeo.org

Ensure that you have AddTrust's root certificate installed (the
OpenSSL hash is 157753a5.0).

> until the situation is resolved.

There's nothing to resolve. The certificate was invalid for a couple
of days at the beginning of the month, but that is no longer relevant.

-- 
Glynn Clements <glynn at gclements.plus.com>