Re: DNF and https

2016-04-10 Thread Adam Williamson
On Sun, 2016-04-10 at 18:59 +0100, Russel Winder wrote: > On Sun, 2016-04-10 at 11:35 -0400, Igor Gnatenko wrote: > > > > Can you try this? > > > > SSLCertificateFile/etc/letsencrypt/live/www.russel.org.uk/cert.pe > > m > > SSLCertificateKeyFile /etc/letsencrypt/live/www.russel.org.uk/privkey

Re: DNF and https

2016-04-10 Thread Gordon Messmer
On 04/09/2016 07:35 AM, Russel Winder wrote: I have experimental evidence that dnf fails using https if the repository site certificate is a Let's Encrypt one. Is this a bug or a feature? Have you correctly included the certificate chain? If not, your browser might have the required intermedi

Re: DNF and https

2016-04-10 Thread Russel Winder
On Sun, 2016-04-10 at 11:35 -0400, Igor Gnatenko wrote: > Can you try this? > > SSLCertificateFile/etc/letsencrypt/live/www.russel.org.uk/cert.pe > m > SSLCertificateKeyFile /etc/letsencrypt/live/www.russel.org.uk/privkey > .pem > SSLCertificateChainFile /etc/letsencrypt/live/www.russel.org.uk

Re: DNF and https

2016-04-10 Thread Igor Gnatenko
l Winder" > To: test@lists.fedoraproject.org > Sent: Sunday, April 10, 2016 4:41:33 PM > Subject: Re: DNF and https > > On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote: > > > […] > > how did you set SSL there? I guess a bit wrongly.. > >

Re: DNF and https

2016-04-10 Thread Russel Winder
On Sun, 2016-04-10 at 08:55 -0400, Igor Gnatenko wrote: > […] > how did you set SSL there? I guess a bit wrongly.. SSLEngine on SSLCertificateFile "/etc/letsencrypt/live/www.russel.org.uk/cer t.pem" SSLCertificateKeyFile "/etc/letsencrypt/live/www.russel.org.uk/ privkey.pe

Re: DNF and https

2016-04-10 Thread Igor Gnatenko
it works correctly - Let's Encrypt Authority X1 Please show settings of your webserver.. - Original Message - > From: "Russel Winder" > To: test@lists.fedoraproject.org > Sent: Sunday, April 10, 2016 1:38:48 PM > Subject: Re: DNF and https > > On Sat, 2016

Re: DNF and https

2016-04-10 Thread Russel Winder
On Sat, 2016-04-09 at 15:54 +0100, Pawel Bogucki wrote: > Do you have a public repo with such cert for testing? https://www.winder.org.uk/Fedora-RPMs/ should be accessible from everywhere. > On 9 April 2016 at 15:35, Russel Winder wrote: > > > > > Hi, > > > > I have experimental evidence tha

Re: DNF and https

2016-04-09 Thread Adam Williamson
On Sat, 2016-04-09 at 15:54 +0100, Pawel Bogucki wrote: > Do you have a public repo with such cert for testing? You could try one of the repos I have lying around www.happyassassin.net , as I just flipped that over to LE. https://www.happyassassin.net/repos/doom/ should do. -- Adam Williamson Fed

Re: DNF and https

2016-04-09 Thread Pawel Bogucki
Do you have a public repo with such cert for testing? On 9 April 2016 at 15:35, Russel Winder wrote: > Hi, > > I have experimental evidence that dnf fails using https if the > repository site certificate is a Let's Encrypt one. Is this a bug or a > feature? > > -- > Russel. > > =