Stream: Coq devs & plugin devs

Topic: pkg:nix:deploy unhappy


view this post on Zulip Gaëtan Gilbert (Oct 04 2021 at 11:52):

https://gitlab.com/coq/coq/-/jobs/1644852423

error: unable to download 'https://coq.inria.fr/nix/toolbox': SSL peer certificate or SSH remote key was not OK (60)

is this known?

view this post on Zulip Guillaume Melquiond (Oct 04 2021 at 12:32):

The certificate is fresh from today, so this is presumably a new issue. That said, the certificate seems just fine to me.

view this post on Zulip Guillaume Melquiond (Oct 04 2021 at 12:34):

That said, the job seems to have been run before the certificate was valid, so it might have been a transient issue.

view this post on Zulip Théo Zimmermann (Oct 04 2021 at 13:09):

Unfortunately, retrying did not help!

view this post on Zulip Paolo Giarrusso (Oct 04 2021 at 13:57):

Chrome seems to like the certificate (even if it's usually one of the strictest TLS clients around), so any chance Let's Encrypt's "new root certificate" is involved (https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ )? The problem did not start today but on 1 October so it'd match...
Success (30 Sep): https://gitlab.com/coq/coq/-/jobs/1637080848
Failure (1 Oct): https://gitlab.com/coq/coq/-/jobs/1640997485

view this post on Zulip Paolo Giarrusso (Oct 04 2021 at 14:07):

ssllabs finds no other relevant issue in IPv4: https://www.ssllabs.com/ssltest/analyze.html?d=coq.inria.fr&s=51.91.56.51.
(it fails to connect to the IPv6 version https://www.ssllabs.com/ssltest/analyze.html?d=coq.inria.fr, but that doesn't sound relevant).

view this post on Zulip Théo Zimmermann (Oct 23 2021 at 11:37):

I was reminded of this by https://github.com/coq/coq/issues/15060 and it seems that the error still occurs as of today :frown:


Last updated: Feb 05 2023 at 19:29 UTC