From rdmurray at bitdance.com  Thu Jun 30 12:01:01 2016
From: rdmurray at bitdance.com (R. David Murray)
Date: Thu, 30 Jun 2016 12:01:01 -0400
Subject: [Python-buildbots] hg.python.org cert changed, update fingerprint
Message-ID: <20160630160103.40CF4B14163@webabinitio.net>

Infra has updated the cert that serves hg.python.org.  If you have
hardcoded the fingerprint in your slave's hg config you'll need
to update it to:

    31:d8:79:0f:ca:b5:c4:76:85:ba:61:84:e7:5b:52:4f:78:7d:38:3e

At least one buildbot seems to be affected by this (PPC64LE Fedora).

--David

From dje.gcc at gmail.com  Thu Jun 30 12:50:53 2016
From: dje.gcc at gmail.com (David Edelsohn)
Date: Thu, 30 Jun 2016 12:50:53 -0400
Subject: [Python-buildbots] hg.python.org cert changed,
 update fingerprint
In-Reply-To: <20160630160103.40CF4B14163@webabinitio.net>
References: <20160630160103.40CF4B14163@webabinitio.net>
Message-ID: <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>

I have updated the fingerprint in .hgrc.

- David


On Thu, Jun 30, 2016 at 12:01 PM, R. David Murray <rdmurray at bitdance.com> wrote:
> Infra has updated the cert that serves hg.python.org.  If you have
> hardcoded the fingerprint in your slave's hg config you'll need
> to update it to:
>
>     31:d8:79:0f:ca:b5:c4:76:85:ba:61:84:e7:5b:52:4f:78:7d:38:3e
>
> At least one buildbot seems to be affected by this (PPC64LE Fedora).
>
> --David
> _______________________________________________
> Python-Buildbots mailing list
> Python-Buildbots at python.org
> https://mail.python.org/mailman/listinfo/python-buildbots

From zachary.ware+pydev at gmail.com  Thu Jun 30 12:59:07 2016
From: zachary.ware+pydev at gmail.com (Zachary Ware)
Date: Thu, 30 Jun 2016 11:59:07 -0500
Subject: [Python-buildbots] hg.python.org cert changed,
 update fingerprint
In-Reply-To: <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>
References: <20160630160103.40CF4B14163@webabinitio.net>
 <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>
Message-ID: <CAKJDb-OWkgSY=FJb=KdF1Ah9r39LZ5w33xO0BXE+qamyXzUgQg@mail.gmail.com>

On Thu, Jun 30, 2016 at 11:50 AM, David Edelsohn <dje.gcc at gmail.com> wrote:
> I have updated the fingerprint in .hgrc.

I'm not sure the change stuck, see
http://buildbot.python.org/all/builders/PPC64LE%20Fedora%202.7/builds/433

-- 
Zach

From dje.gcc at gmail.com  Thu Jun 30 13:16:46 2016
From: dje.gcc at gmail.com (David Edelsohn)
Date: Thu, 30 Jun 2016 13:16:46 -0400
Subject: [Python-buildbots] hg.python.org cert changed,
 update fingerprint
In-Reply-To: <CAKJDb-OWkgSY=FJb=KdF1Ah9r39LZ5w33xO0BXE+qamyXzUgQg@mail.gmail.com>
References: <20160630160103.40CF4B14163@webabinitio.net>
 <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>
 <CAKJDb-OWkgSY=FJb=KdF1Ah9r39LZ5w33xO0BXE+qamyXzUgQg@mail.gmail.com>
Message-ID: <CAGWvny=Skjyhz=wRpt=98Y60bh+B8i+-3xcCRstogsS3J+iXWw@mail.gmail.com>

The fingerprint needed to be updated in both PPC64 systems.

I had better look at the Z systems as well.

- David

On Thu, Jun 30, 2016 at 12:59 PM, Zachary Ware
<zachary.ware+pydev at gmail.com> wrote:
> On Thu, Jun 30, 2016 at 11:50 AM, David Edelsohn <dje.gcc at gmail.com> wrote:
>> I have updated the fingerprint in .hgrc.
>
> I'm not sure the change stuck, see
> http://buildbot.python.org/all/builders/PPC64LE%20Fedora%202.7/builds/433
>
> --
> Zach

From rdmurray at bitdance.com  Thu Jun 30 14:50:24 2016
From: rdmurray at bitdance.com (R. David Murray)
Date: Thu, 30 Jun 2016 14:50:24 -0400
Subject: [Python-buildbots] hg.python.org cert changed,
 update fingerprint
In-Reply-To: <CAGWvny=Skjyhz=wRpt=98Y60bh+B8i+-3xcCRstogsS3J+iXWw@mail.gmail.com>
References: <20160630160103.40CF4B14163@webabinitio.net>
 <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>
 <CAKJDb-OWkgSY=FJb=KdF1Ah9r39LZ5w33xO0BXE+qamyXzUgQg@mail.gmail.com>
 <CAGWvny=Skjyhz=wRpt=98Y60bh+B8i+-3xcCRstogsS3J+iXWw@mail.gmail.com>
Message-ID: <20160630185024.833DDB1415E@webabinitio.net>

On Thu, 30 Jun 2016 13:16:46 -0400, David Edelsohn <dje.gcc at gmail.com> wrote:
> The fingerprint needed to be updated in both PPC64 systems.
> 
> I had better look at the Z systems as well.

Out of curiosity, what's the reason for using the hardcoded fingerprint
instead of just relying on the normal cert verify?

Also note that once we move to github I don't think you *can* use the
fingerprint approach.  (I could be wrong, I'm just repeating something
I heard on IRC :)

--David

From dje.gcc at gmail.com  Thu Jun 30 16:20:35 2016
From: dje.gcc at gmail.com (David Edelsohn)
Date: Thu, 30 Jun 2016 16:20:35 -0400
Subject: [Python-buildbots] hg.python.org cert changed,
 update fingerprint
In-Reply-To: <20160630185024.833DDB1415E@webabinitio.net>
References: <20160630160103.40CF4B14163@webabinitio.net>
 <CAGWvnymKsBHOjM=4xZQvdNtJQU5DHNqxM96pzMSQWU18O8iRSw@mail.gmail.com>
 <CAKJDb-OWkgSY=FJb=KdF1Ah9r39LZ5w33xO0BXE+qamyXzUgQg@mail.gmail.com>
 <CAGWvny=Skjyhz=wRpt=98Y60bh+B8i+-3xcCRstogsS3J+iXWw@mail.gmail.com>
 <20160630185024.833DDB1415E@webabinitio.net>
Message-ID: <CAGWvnymDFZZscgR08kkp1Hcc0Xaz=aOXm0waG-DEoyPzRmutkg@mail.gmail.com>

The current Fedora installs are somewhat old because more recent
Fedora has been unstable, but they are out of date so the certificates
are out of date.  Similar for AIX.

The AIX system should be updated shortly.

Thanks, David


On Thu, Jun 30, 2016 at 2:50 PM, R. David Murray <rdmurray at bitdance.com> wrote:
> On Thu, 30 Jun 2016 13:16:46 -0400, David Edelsohn <dje.gcc at gmail.com> wrote:
>> The fingerprint needed to be updated in both PPC64 systems.
>>
>> I had better look at the Z systems as well.
>
> Out of curiosity, what's the reason for using the hardcoded fingerprint
> instead of just relying on the normal cert verify?
>
> Also note that once we move to github I don't think you *can* use the
> fingerprint approach.  (I could be wrong, I'm just repeating something
> I heard on IRC :)
>
> --David
> _______________________________________________
> Python-Buildbots mailing list
> Python-Buildbots at python.org
> https://mail.python.org/mailman/listinfo/python-buildbots