<div dir="ltr">admin@h.o is the correct list though I expect all of us are on ghc-devs@h.o also :)<div>I at least read admin with a far higher priority though.<br></div><div><br></div><div>We've gone and added the full chain for clients that don't self-acquire them and also tightened up the allowed cipher list.</div><div>Please let us know if you encounter any further issues.</div><div><br></div><div>-davean</div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Dec 18, 2016 at 2:12 PM, Erik Hesselink <span dir="ltr"><<a href="mailto:hesselink@gmail.com" target="_blank">hesselink@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>I noticed this as well, since my work VPN does fairly strict certificate checking and didn't allow me to connect to any <a href="http://haskell.org" target="_blank">haskell.org</a> urls due to this.<br><br></div>I'm not sure about the right list, I've added <a href="mailto:admin@haskell.org" target="_blank">admin@haskell.org</a> to the CC list.<span class="HOEnZb"><font color="#888888"><br><br></font></span></div><span class="HOEnZb"><font color="#888888">Erik<br></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 18 December 2016 at 07:12, Edward Z. Yang <span dir="ltr"><<a href="mailto:ezyang@mit.edu" target="_blank">ezyang@mit.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">See: <a href="https://www.sslshopper.com/ssl-checker.html#hostname=www.haskell.org" rel="noreferrer" target="_blank">https://www.sslshopper.com/ssl<wbr>-checker.html#hostname=www.has<wbr>kell.org</a><br>
<br>
This is causing curl to fail to download it:<br>
<br>
ezyang@sabre:~/Downloads$ curl <a href="https://www.haskell.org/cabal/release/cabal-install-1.24.0.0/cabal-install-1.24.0.0-x86_64-unknown-mingw32.zip" rel="noreferrer" target="_blank">https://www.haskell.org/cabal/<wbr>release/cabal-install-1.24.0.0<wbr>/cabal-install-1.24.0.0-x86_64<wbr>-unknown-mingw32.zip</a><br>
curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates<wbr>.crt CRLfile: none<br>
More details here: <a href="http://curl.haxx.se/docs/sslcerts.html" rel="noreferrer" target="_blank">http://curl.haxx.se/docs/sslce<wbr>rts.html</a><br>
<br>
curl performs SSL certificate verification by default, using a "bundle"<br>
of Certificate Authority (CA) public keys (CA certs). If the default<br>
bundle file isn't adequate, you can specify an alternate file<br>
using the --cacert option.<br>
If this HTTPS server uses a certificate signed by a CA represented in<br>
the bundle, the certificate verification probably failed due to a<br>
problem with the certificate (it might be expired, or the name might<br>
not match the domain name in the URL).<br>
If you'd like to turn off curl's verification of the certificate, use<br>
the -k (or --insecure) option.<br>
<br>
Apologies if this is the wrong list.<br>
<br>
Thanks,<br>
Edward<br>
______________________________<wbr>_________________<br>
ghc-devs mailing list<br>
<a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org</a><br>
<a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-bi<wbr>n/mailman/listinfo/ghc-devs</a><br>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div></div>