dev@glassfish.java.net

Re: svn.dev.java.net server certificate problem

From: Bill Shannon <bill.shannon_at_sun.com>
Date: Thu, 21 Aug 2008 20:30:01 -0700

Just to follow up on this old issue...

The certificate expired and Collab switched to a new one. They didn't
bother to notify anyone. Expect the same thing to happen next year about
this time as they're using certificates that are only good for one year.


Lloyd Chambers wrote:
> Bill,
>
> I saw the same thing and I checked that the fingerprint matched that
> found using my browser to https://glassfish.dev.java.net. So if it's
> compromised, everything at glassfish.dev.java.net is compromised. :)
>
> The certificate is apparently signed by a root certificate which is not
> included in browsers by default as a trusted authority, or at least in
> Safari 3, which is what I use.
>
> Lloyd
>
> ..............................................
> Lloyd Chambers
> lloyd.chambers_at_sun.com
> GlassFish team, admin
>
>
>
>
> On Jul 19, 2008, at 4:40 PM, Bill Shannon wrote:
>
>> Just recently I've started getting the following error when I do "svn
>> update":
>>
>> Error validating server certificate for 'https://svn.dev.java.net:443':
>> - The certificate is not issued by a trusted authority. Use the
>> fingerprint to validate the certificate manually!
>> Certificate information:
>> - Hostname: *.dev.java.net
>> - Valid: from Jul 7 19:18:07 2008 GMT until Sep 6 19:18:07 2009 GMT
>> - Issuer: Equifax Secure Inc., US
>> - Fingerprint:
>> 48:4a:7d:75:84:ba:cb:1d:ab:3f:d2:25:83:ec:7e:ec:3c:68:c6:a0
>> (R)eject, accept (t)emporarily or accept (p)ermanently?
>>
>>
>> Is the server broken, is my machine broken, or is something else going
>> on here?
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>