Package: qa.debian.org User: qa.debian.org@packages.debian.org Usertags: webpages Tags: patch On Sat, May 30, 2015 at 02:07:48PM -0400, James McCoy wrote: > On Sat, May 30, 2015 at 12:55:27PM -0400, Michael Gilbert wrote: > > Running uscan on packages using the sf.net redirector will results in: > > $ uscan --verbose --report > > uscan warning: In debian/watch, > > no matching hrefs for watch line > > http://sf.net/wine/wine-(.+)\.tar\.bz2 > > -- Scan finished > > Fallout from the upgrade to Jessie, it seems: > > [Sat May 30 07:22:51.153551 2015] [:error] [pid 22026] [client 5.48.220.179:36535] PHP Warning: simplexml_load_file(): SSL operation failed with code 1. OpenSSL Error messages:\nerror:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed in /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153684 2015] [:error] [pid 22026] [client 5.48.220.179:36535] PHP Warning: simplexml_load_file(): Failed to enable crypto in /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153860 2015] [:error] [pid 22026] [client 5.48.220.179:36535] PHP Warning: simplexml_load_file(https://sourceforge.net/projects/limitcpu/rss?limit=10000000000000000000): failed to open stream: operation failed in /srv/qa.debian.org/web/watch/sf.php on line 18 > [Sat May 30 07:22:51.153954 2015] [:error] [pid 22026] [client 5.48.220.179:36535] PHP Warning: simplexml_load_file(): I/O warning : failed to load external entity "https://sourceforge.net/projects/limitcpu/rss?limit=10000000000000000000" in /srv/qa.debian.org/web/watch/sf.php on line 18 > > Not sure what needs to be fixed, off-hand. Looks like this is related to <https://wiki.debian.org/ServicesSSL>. The attached patch is working for me. Cheers, -- James GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <jamessan@debian.org>
From 03564691812515470851f3192f5077a0dd708c54 Mon Sep 17 00:00:00 2001
From: James McCoy <vega.james@gmail.com>
Date: Sat, 30 May 2015 14:54:25 -0400
Subject: [PATCH] watch/sf.wml: Use ca-global to validate SourceForge certs
Signed-off-by: James McCoy <vega.james@gmail.com>
---
wml/watch/sf.wml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/wml/watch/sf.wml b/wml/watch/sf.wml
index ebbf5a7..ba502ee 100644
--- a/wml/watch/sf.wml
+++ b/wml/watch/sf.wml
@@ -20,6 +20,9 @@ if (preg_match(',/.+,', $project)) {
$xml_url = "https://sourceforge.net/projects/$project/rss?limit=10000000000000000000";;
+$context = stream_context_create(array('ssl' => array('capath' => '/etc/ssl/ca-global')));
+libxml_set_streams_context($context);
+
$xml = simplexml_load_file($xml_url, 'SimpleXMLElement', LIBXML_NOCDATA);
$title = $xml->channel[0]->title;
$files = $xml->channel[0]->item;
--
2.1.4
Attachment:
signature.asc
Description: Digital signature