Fossil SCM
The error message Fossil gives on TLS certificate check failure changed in Fossil 2.11, so updated www/ssl.wiki to show the new message. Left the old message in place, since many people will be running versions of Fossil that still use that format, and a big part of the reason why we have this error message in the document is to make it come up in web searches for the error, since we give solutions later in the same doc.
Commit
3c0565ab5e9725b7975ba57a4a55c5826349c5dfe09d842d3dabbf880337671a
Parent
48dca1b4c9ca20e…
1 file changed
+12
-2
+12
-2
| --- www/ssl.wiki | ||
| +++ www/ssl.wiki | ||
| @@ -121,12 +121,22 @@ | ||
| 121 | 121 | server. Verify the certificate fingerprint is correct, then answer |
| 122 | 122 | "always" if you want Fossil to remember your decision. |
| 123 | 123 | |
| 124 | 124 | If you are cloning from or syncing to Fossil servers that use a |
| 125 | 125 | certificate signed by a well-known CA or one of its delegates, Fossil |
| 126 | -still has to know which CA roots to trust. When this fails, you get a | |
| 127 | -big long error message that starts with this text: | |
| 126 | +still has to know which CA roots to trust. When this fails, you get an | |
| 127 | +error message that looks like this in Fossil 2.11 and newer: | |
| 128 | + | |
| 129 | +<pre> | |
| 130 | + Unable to verify SSL cert from www.fossil-scm.org | |
| 131 | + subject: CN = sqlite.org | |
| 132 | + issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 | |
| 133 | + sha256: bf26092dd97df6e4f7bf1926072e7e8d200129e1ffb8ef5276c1e5dd9bc95d52 | |
| 134 | + accept this cert and continue (y/N)? | |
| 135 | +</pre> | |
| 136 | + | |
| 137 | +In older versions, the message was much longer and began with this line: | |
| 128 | 138 | |
| 129 | 139 | <pre> |
| 130 | 140 | SSL verification failed: unable to get local issuer certificate |
| 131 | 141 | </pre> |
| 132 | 142 | |
| 133 | 143 |
| --- www/ssl.wiki | |
| +++ www/ssl.wiki | |
| @@ -121,12 +121,22 @@ | |
| 121 | server. Verify the certificate fingerprint is correct, then answer |
| 122 | "always" if you want Fossil to remember your decision. |
| 123 | |
| 124 | If you are cloning from or syncing to Fossil servers that use a |
| 125 | certificate signed by a well-known CA or one of its delegates, Fossil |
| 126 | still has to know which CA roots to trust. When this fails, you get a |
| 127 | big long error message that starts with this text: |
| 128 | |
| 129 | <pre> |
| 130 | SSL verification failed: unable to get local issuer certificate |
| 131 | </pre> |
| 132 | |
| 133 |
| --- www/ssl.wiki | |
| +++ www/ssl.wiki | |
| @@ -121,12 +121,22 @@ | |
| 121 | server. Verify the certificate fingerprint is correct, then answer |
| 122 | "always" if you want Fossil to remember your decision. |
| 123 | |
| 124 | If you are cloning from or syncing to Fossil servers that use a |
| 125 | certificate signed by a well-known CA or one of its delegates, Fossil |
| 126 | still has to know which CA roots to trust. When this fails, you get an |
| 127 | error message that looks like this in Fossil 2.11 and newer: |
| 128 | |
| 129 | <pre> |
| 130 | Unable to verify SSL cert from www.fossil-scm.org |
| 131 | subject: CN = sqlite.org |
| 132 | issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 |
| 133 | sha256: bf26092dd97df6e4f7bf1926072e7e8d200129e1ffb8ef5276c1e5dd9bc95d52 |
| 134 | accept this cert and continue (y/N)? |
| 135 | </pre> |
| 136 | |
| 137 | In older versions, the message was much longer and began with this line: |
| 138 | |
| 139 | <pre> |
| 140 | SSL verification failed: unable to get local issuer certificate |
| 141 | </pre> |
| 142 | |
| 143 |