dev@glassfish.java.net

Re: svn.dev.java.net server certificate problem

From: Lloyd Chambers <Lloyd.Chambers_at_Sun.COM>
Date: Mon, 21 Jul 2008 10:17:42 -0700

Bill,

I saw the same thing and I checked that the fingerprint matched that
found using my browser to https://glassfish.dev.java.net. So if it's
compromised, everything at glassfish.dev.java.net is compromised. :)

The certificate is apparently signed by a root certificate which is
not included in browsers by default as a trusted authority, or at
least in Safari 3, which is what I use.

Lloyd

..............................................
Lloyd Chambers
lloyd.chambers_at_sun.com
GlassFish team, admin




On Jul 19, 2008, at 4:40 PM, Bill Shannon wrote:

> Just recently I've started getting the following error when I do
> "svn update":
>
> Error validating server certificate for 'https://svn.dev.java.net:
> 443':
> - The certificate is not issued by a trusted authority. Use the
> fingerprint to validate the certificate manually!
> Certificate information:
> - Hostname: *.dev.java.net
> - Valid: from Jul 7 19:18:07 2008 GMT until Sep 6 19:18:07 2009 GMT
> - Issuer: Equifax Secure Inc., US
> - Fingerprint: 48:4a:7d:75:84:ba:cb:1d:ab:3f:d2:25:83:ec:7e:ec:3c:
> 68:c6:a0
> (R)eject, accept (t)emporarily or accept (p)ermanently?
>
>
> Is the server broken, is my machine broken, or is something else going
> on here?
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>