1150093 - Certificate verification error for ftp.mozilla.org: certificate signature failure

Status: RESOLVED INCOMPLETE

(Infrastructure & Operations :: RelOps: General, task)

Description

[Massimo Gervasini [:massimo]]

In l10n mozharness build, we hit a: "Certificate verification error for ftp.mozilla.org: certificate signature failure" error when asking "make" to download the en-us binary over https

Here's the log:

INFO -  c:/builds/moz2_slave/WINNT-5.2-ash-l10n-1_10-000000/build/ash/obj-l10n/_virtualenv/Scripts/python.exe c:/builds/moz2_slave/WINNT-5.2-ash-l10n-1_10-000000/build/ash/config/nsinstall.py -D c:/builds/moz2_slave/WINNT-5.2-ash-l10n-1_10-000000/build/ash/obj-l10n/dist/
INFO -  (cd c:/builds/moz2_slave/WINNT-5.2-ash-l10n-1_10-000000/build/ash/obj-l10n/dist/ && wget --no-cache -nv -N  'https://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-central//firefox-39.0a1.en-US.win32.zip')
INFO -  ERROR: Certificate verification error for ftp.mozilla.org: certificate signature failure
INFO -  To connect to ftp.mozilla.org insecurely, use `--no-check-certificate'.
INFO -  Unable to establish SSL connection.
INFO -  c:/builds/moz2_slave/WINNT-5.2-ash-l10n-1_10-000000/build/ash/toolkit/locales/l10n.mk:187: recipe for target 'wget-en-US' failed
INFO -  mozmake.exe: *** [wget-en-US] Error 1
ERROR - Return code: 2

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

You need a newer version of wget with newer certificate authorities.

Comment 2

[Justin Wood (:Callek)]

(In reply to Dustin J. Mitchell [:dustin] from comment #1)
> You need a newer version of wget with newer certificate authorities.

which afaik isn't easy on windows.

Which win host was this, is it one of the ones in a testing state (e.g. puppet-based windows) or what?

Comment 3

[Amy Rich [:arr] [:arich]]

Is there more information here, or is this RESOLVED/INCOMPLETE?