Openssl: Unable to open https://openssl.org

[nmtitov]

Hello, I can't open https://openssl.org website due to certificate issues.

Also, Cocoapods application which is used for iOS development stopped working. I get the following error when I install OpenSSL dependency:

Unable to install pod OpenSSL
If OpenSSL is hosted on a private repository, make sure that buddybuild has access to this repository too. If you're targeting a fixed revision (like a git commit), make sure this revision exists.

Here is the error log from our build server:

Installing OpenSSL (1.0.210)
85
    [!] Error installing OpenSSL
86
    [!] /usr/bin/curl -f -L -o /var/folders/84/f2dfdw6s37lf1jhvzxqdvxc00000gn/T/d20190423-3078-kbyrvb/file.tgz https://openssl.org/source/openssl-1.0.2j.tar.gz --create-dirs --netrc-optional --retry 2
87
      % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
88
                                     Dload  Upload   Total   Spent    Left  Speed
89
      0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
90
      0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
91
    curl: (51) SSL: no alternative certificate subject name matches target host name 'openssl.org'
92
    If OpenSSL is hosted on a private repository, make sure that buddybuild has access to this repository too. If you're targeting a fixed revision (like a git commit), make sure this revision exists.

I get the same on my machine:

curl https://openssl.org/source/openssl-1.0.2j.tar.gz
curl: (51) SSL: no alternative certificate subject name matches target host name 'openssl.org'

curl -k allows to bypass the issue:

$ curl  https://openssl.org/source/openssl-1.0.2j.tar.gz -k -L -o openssl-1.0.2j.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   338  100   338    0     0   1373      0 --:--:-- --:--:-- --:--:--  1373
100 5183k  100 5183k    0     0  3214k      0  0:00:01  0:00:01 --:--:-- 4354k

$ file openssl-1.0.2j.tar.gz 
openssl-1.0.2j.tar.gz: gzip compressed data, last modified: Mon Sep 26 09:49:51 2016, max compression, from Unix, original size 26726400

Not sure if that's the right place to report a server configuration issue.

Thanks!

[mattcaswell]

The correct website address is https://www.openssl.org. Accessing https://openssl.org just redirects to the www version. Looks like an incorrect certificate is installed on openssl.org, so you don't get as far as getting the redirect. Interestingly Chrome doesn't seem to complain.

BTW, probably the correct place to report website issues would be:

https://github.com/openssl/web/issues

[levitte]

This is fixed just now.

[nmtitov]

Works now. Thank you! 👍