Page 1 of 1

SSL Certificate error

Posted: Fri Nov 21, 2014 6:08 pm
by xenic
I originally posted this problem at Amigans.net and got no response. Since I think the problem originates in AmiSSL which is distributed with OS4, I'm going to try for a response here.

I haven't been able to perform secure (https) Subversion checkouts or commits at SourceForge lately. I get the following error:

Certificate verification error: certificate signature failure (https://svn.code.sf.net)

Does this mean I need new certificates for AmiSSL and where can I get new AmiSSL certificates??

Re: SSL Certificate error

Posted: Mon Nov 24, 2014 4:34 am
by Hans
xenic wrote:Does this mean I need new certificates for AmiSSL and where can I get new AmiSSL certificates??
Either that, or Sourceforge has disabled old SSL encryption standards that have known exploits. AmiSSL is rather old, and it's getting to the point that most (all?) of the encryption standards that it supports now have known exploits/weaknesses, and webmasters are being encouraged to disable those older standards/protocols.

Olaf Barthel did the subversion port for OS4, so he should be able to give you a better idea of what needs to be done.

Hans

Re: SSL Certificate error

Posted: Fri Nov 28, 2014 12:39 am
by ssolie
xenic wrote:Does this mean I need new certificates for AmiSSL and where can I get new AmiSSL certificates??
You can do nothing until AmiSSL is updated. It is being worked on.

Re: SSL Certificate error

Posted: Mon Dec 01, 2014 8:39 pm
by xenic
ssolie wrote:
xenic wrote:Does this mean I need new certificates for AmiSSL and where can I get new AmiSSL certificates??
You can do nothing until AmiSSL is updated. It is being worked on.
O.K. Thanks for the info. Hopefully, Subversion will start working again when AmiSSL is updated.

Re: SSL Certificate error

Posted: Tue Dec 02, 2014 9:30 am
by salass00
The AmiSSL project is hosted on sourceforge (LGPLv3 license):
https://sourceforge.net/projects/amissl/

Re: SSL Certificate error

Posted: Tue Dec 09, 2014 11:41 pm
by TSK
I was unable to read my emails a couple of days because of SSL error. I was going to call their customer service but after reading this I disabled SSL and now I can use email again.