Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
MIME-Version: 1.0
References: <7d5a91f3-e5bd-8410-487d-5cbcd23b174b@gmx.de> <8a425b75-cfc7-17b4-3991-63945a855715@gmx.de>
 <20200530161612.3rz42y5yyulitsdl@chatter.i7.local>
In-Reply-To: <20200530161612.3rz42y5yyulitsdl@chatter.i7.local>
From:   Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Date:   Sat, 30 May 2020 13:10:06 -0400
Message-ID: <CAMwyc-TfqyLZtamqN5ELr-hceySwWZ4TPMYJLtDRPHSuGKmbMQ@mail.gmail.com>
Subject: Re: fatal: unable to access 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/':
 SSL certificate problem: certificate has expired
To:     =?UTF-8?Q?Toralf_F=C3=B6rster?= <toralf.foerster@gmx.de>
Cc:     Linux Kernel <linux-kernel@vger.kernel.org>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

On Sat, 30 May 2020 at 12:16, Konstantin Ryabitsev
<konstantin@linuxfoundation.org> wrote:
> > > $ curl https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
> > > curl: (60) SSL certificate problem: certificate has expired
> > > More details here: https://curl.haxx.se/docs/sslcerts.html
> > >
> > > curl failed to verify the legitimacy of the server and therefore could not
> > > establish a secure connection to it. To learn more about this situation and
> > > how to fix it, please visit the web page mentioned above.
> > >
> >
> > Well, the cert is expired: "notAfter=May 30 10:48:38 2020 GMT"
>
> It's one of the intermediaries. We're replacing that cert right now.

The bad intermediate cert is gone now, so you shouldn't see this
problem any more (and the fact that you were seeing it in the first
place suggests that you should update your openssl library, see
https://calnetweb.berkeley.edu/calnet-technologists/incommon-sectigo-certificate-service/addtrust-external-root-expiration-may-2020).

-K