error: unable to download 'https://coq.inria.fr/nix/toolbox': SSL peer certificate or SSH remote key was not OK (60)
is this known?
The certificate is fresh from today, so this is presumably a new issue. That said, the certificate seems just fine to me.
That said, the job seems to have been run before the certificate was valid, so it might have been a transient issue.
Unfortunately, retrying did not help!
Chrome seems to like the certificate (even if it's usually one of the strictest TLS clients around), so any chance Let's Encrypt's "new root certificate" is involved (https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ )? The problem did not start today but on 1 October so it'd match...
Success (30 Sep): https://gitlab.com/coq/coq/-/jobs/1637080848
Failure (1 Oct): https://gitlab.com/coq/coq/-/jobs/1640997485
ssllabs finds no other relevant issue in IPv4: https://www.ssllabs.com/ssltest/analyze.html?d=coq.inria.fr&s=220.127.116.11.
(it fails to connect to the IPv6 version https://www.ssllabs.com/ssltest/analyze.html?d=coq.inria.fr, but that doesn't sound relevant).
I was reminded of this by https://github.com/coq/coq/issues/15060 and it seems that the error still occurs as of today :frown:
Last updated: Dec 07 2023 at 11:02 UTC