Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CI: dist-x86_64-linux docker image does not build anymore #89484

Closed
hkratz opened this issue Oct 3, 2021 · 0 comments · Fixed by #89486
Closed

CI: dist-x86_64-linux docker image does not build anymore #89484

hkratz opened this issue Oct 3, 2021 · 0 comments · Fixed by #89486

Comments

@hkratz
Copy link
Contributor

hkratz commented Oct 3, 2021 

# DEPLOY=1 ./src/ci/docker/run.sh dist-x86_64-linux
[...]
Step 16/37 : RUN ./build-binutils.sh
 ---> Running in 3eaaea3b7e5a
+ source shared.sh
+ VERSION=2.26.1
+ curl https://ftp.gnu.org/gnu/binutils/binutils-2.26.1.tar.bz2
+ tar xfj -
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

Most likely related to the Let's Encrypt root CA expiration
@hkratz hkratz mentioned this issue Oct 3, 2021
Merged
@bors bors closed this as completed in 9dbb26e Oct 3, 2021
ehuss pushed a commit to ehuss/rust that referenced this issue Oct 4, 2021
@bors @ehuss
Auto merge of rust-lang#89486 - rusticstuff:docker_letsencrypt_ca_upd…
a6b7335 
…ate, r=Mark-Simulacrum

Update Let's Encrypt ROOT CA certificate in dist-(i686|x86_64)-linux docker images

The DST Root CA X3 used by Let's Encrypt has expired ([Let's Encrypt announcement](https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/)). This patch installs the new root certificate (ISRG Root X1) and disables the old one. Disabling the old one is necessary because otherwise curl still fails to download from servers with Let's Encrypt certs even though they are cross-signed.

Fixes rust-lang#89484.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update Let's Encrypt ROOT CA certificate in dist-(i686|x86_64)-linux docker images rusticstuff/rust
1 participant
@hkratz