<div dir="ltr">I think the public name is pointed to the staging site because the main one is down for the trac to github migration.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Mar 9, 2019 at 8:59 PM Michael Sloan <<a href="mailto:mgsloan@gmail.com">mgsloan@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Whoah, I can't get <a href="https://ghc.haskell.org/" rel="noreferrer" target="_blank">https://ghc.haskell.org/</a> to load at all - it's also<br>
trying to use the <a href="http://gitlab.staging.haskell.org" rel="noreferrer" target="_blank">gitlab.staging.haskell.org</a> cert. I can't get chrome<br>
to ignore the cert error because it's using HSTS - HTTP Strict<br>
Transport Security.<br>
<br>
On Sat, Mar 9, 2019 at 5:53 PM Michael Sloan <<a href="mailto:mgsloan@gmail.com" target="_blank">mgsloan@gmail.com</a>> wrote:<br>
><br>
> I just encountered this when doing a "git pull" on my Ubuntu 18.04.1 machine:<br>
><br>
> > fatal: unable to access '<a href="https://gitlab.haskell.org/ghc/ghc/" rel="noreferrer" target="_blank">https://gitlab.haskell.org/ghc/ghc/</a>': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none<br>
><br>
> Chrome also believes that the certificate of<br>
> <a href="https://gitlab.haskell.org/ghc/ghc" rel="noreferrer" target="_blank">https://gitlab.haskell.org/ghc/ghc</a> is invalid and I have to click the<br>
> "Proceed to ... (unsafe)" link. Chrome's certificate viewer shows<br>
> that the certificate is for "<a href="http://gitlab.staging.haskell.org" rel="noreferrer" target="_blank">gitlab.staging.haskell.org</a>" whereas the<br>
> domain is "<a href="http://gitlab.haskell.org" rel="noreferrer" target="_blank">gitlab.haskell.org</a>", so I'm guessing that's the problem.<br>
> I'm not very experienced with such cert stuff, but perhaps a wildcard<br>
> cert like "*.<a href="http://haskell.org" rel="noreferrer" target="_blank">haskell.org</a>" could allow using the same cert regardless<br>
> of whether it's on staging vs prod.<br>
><br>
> For now I've just done "git config --global http.sslverify false"<br>
> temporarily to do the pull. Perhaps this is Shayne Fletcher's cheeky<br>
> workaround? :)<br>
><br>
> -Michael<br>
><br>
> On Fri, Mar 8, 2019 at 10:23 PM Ben Gamari <<a href="mailto:ben@well-typed.com" target="_blank">ben@well-typed.com</a>> wrote:<br>
> ><br>
> > Shayne Fletcher via ghc-devs <<a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org</a>> writes:<br>
> ><br>
> > > I appreciate this isn't really "our" problem :) Nonetheless, if there's any<br>
> > > config we can do on the repo on gitlab, that would be cool. Other URLs<br>
> > > (like github) for example are fine - something specific to gitlab.<br>
> > ><br>
> > I feel like I'm missing something here. I recall you mentioned this in<br>
> > your previous message but there I'm still lacking crucial context. Can<br>
> > you offer any additional details? How exactly does it fail?<br>
> ><br>
> > In principle there is no reason why cloning from <a href="http://gitlab.haskell.org" rel="noreferrer" target="_blank">gitlab.haskell.org</a> from<br>
> > Travis shouldn't work. I'd be happy to fix the issue if there is one but<br>
> > without knowing more I'm pretty powerless to change the situation.<br>
> ><br>
> > Cheers,<br>
> ><br>
> > - Ben<br>
> ><br>
> > _______________________________________________<br>
> > ghc-devs mailing list<br>
> > <a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org</a><br>
> > <a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs</a><br>
_______________________________________________<br>
ghc-devs mailing list<br>
<a href="mailto:ghc-devs@haskell.org" target="_blank">ghc-devs@haskell.org</a><br>
<a href="http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs" rel="noreferrer" target="_blank">http://mail.haskell.org/cgi-bin/mailman/listinfo/ghc-devs</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>brandon s allbery kf8nh</div><div><a href="mailto:allbery.b@gmail.com" target="_blank">allbery.b@gmail.com</a></div></div></div></div></div>