950256 - Linux fuzzer jobs are failing due to a wget certificate error

Status: RESOLVED WORKSFORME

(Infrastructure & Operations Graveyard :: CIDuty, task, P3)

Description

[Jesse Ruderman]

zcat fuzzer-linux-bm57-build1-build50880.txt.gz

builder: fuzzer-linux
slave: bld-centos5-32-vmw-003

...

inpCmdList is: wget -O - https://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux-debug/
stdout: ''
stderr: "--15:05:43--  https://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-central-linux-debug/\nResolving ftp.mozilla.org... 63.245.215.56\nConnecting to ftp.mozilla.org|63.245.215.56|:443... connected.\nERROR: cannot verify ftp.mozilla.org's certificate, issued by `/C=US/O=DigiCert Inc/CN=DigiCert Secure Server CA':\n  Unable to locally verify the issuer's authority.\nTo connect to ftp.mozilla.org insecurely, use `--no-check-certificate'.\nUnable to establish SSL connection.\n"

...

Exception: The following exit code was returned: 1

Comment 1

[Jesse Ruderman]

I could work around this by adding --no-check-certificate to downloadBuild.py, but it would be better if I didn't have to.  I think this worked before...

Comment 2

[John O'Duinn [:joduinn] (please use "needinfo?" flag)]

Found in triage. Moving to platform support as first guess, but maybe this should be moved to GeneralAutomation?

Comment 3

[Chris Cooper [:coop] (he/him)]

(In reply to Jesse Ruderman from comment #1)
> I could work around this by adding --no-check-certificate to
> downloadBuild.py, but it would be better if I didn't have to.  I think this
> worked before...

This sounds like a good interim solution. This platform (bld-centos5-32-vmw) is going away soon, so we should make sure this is fixed properly on our AWS slaves where this should be running once bug 803764 is fixed.

Comment 4

[Jesse Ruderman]

I added --no-check-certificate as a workaround, but only on Linux slaves.

Comment 5

[Chris Cooper [:coop] (he/him)]

Fixed by bug 803764 it seems.