Summary: | ERROR: cannot verify files.kde.org's certificate, issued by `/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA': Unable to locally verify the issuer's authority. | ||
---|---|---|---|
Product: | [Developer tools] Craft | Reporter: | qubodup |
Component: | Core | Assignee: | Hannah von Reth <vonreth> |
Status: | REOPENED --- | ||
Severity: | normal | CC: | kde-windows, martin.marmsoler |
Priority: | NOR | ||
Version: | unspecified | ||
Target Milestone: | --- | ||
Platform: | Microsoft Windows | ||
OS: | Microsoft Windows | ||
Latest Commit: | Version Fixed In: |
Description
qubodup
2018-05-03 15:52:04 UTC
TheOneRing pointed out to me that wget in my PATH was being used (I added C:\Program Files (x86)\sox-14-4-2\ to PATH to be able to use sox easily). The actual nature of this bug is: If (a custom?) wget is present in PATH, then the installation command uses that wget. Once I removed the location from PATH, that included wget, executing command: C:\Program Files (x86)\sox-14-4-2\wget.exe -c -t 10 --max-redirect 50 -O C:\CraftRoot\download\archives\dev-util\7zip\7z1801-extra.zip https://files.kde.org/craft/3rdparty/7zip/7z1801-extra.zip changed to: executing command: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Command (new-object net.webclient).DownloadFile('https://files.kde.org/craft/3rdparty/7zip/7z1801-extra.zip', 'C:\CraftRoot\download\archives\dev-util\7zip\7z1801-extra.zip') * It'd be great to prevent a wget in PATH from being used. Thank you for reporting this issue in KDE software. As it has been a while since this issue was reported, can we please ask you to see if you can reproduce the issue with a recent software version? If you can reproduce the issue, please change the status to "REPORTED" when replying. Thank you! Dear Bug Submitter, This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information as soon as possible and set the bug status as REPORTED. Due to regular bug tracker maintenance, if the bug is still in NEEDSINFO status with no change in 30 days the bug will be closed as RESOLVED > WORKSFORME due to lack of needed information. For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging If you have already provided the requested information, please mark the bug as REPORTED so that the KDE team knows that the bug is ready to be confirmed. Thank you for helping us make KDE software even better for everyone! This bug has been in NEEDSINFO status with no change for at least 30 days. The bug is now closed as RESOLVED > WORKSFORME due to lack of needed information. For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging Thank you for helping us make KDE software even better for everyone! I have this problem as well: ``` iex ((new-object net.webclient).DownloadString('https://raw.githubusercontent.com/KDE/craft/master/setup/install_craft.ps1')) Start to boostrap Craft. Where to you want us to install Craft Craft install root: [C:\CraftRoot\]: Downloading: https://raw.githubusercontent.com/KDE/craft/master/setup/CraftBootstrap.py C:\Users\Angelika\AppData\Local\Programs\Python\Python38-32\python.exe C:\CraftRoot\\download\CraftBootstrap.py --prefix C:\CraftRoot\ --branch master Welcome to the Craft setup wizard! Craft will be installed to: C:\CraftRoot\ ------------------------------------------------------------------------------------------------------------------------ Select the version of Qt you want to use (Craft can't mix Qt5 and Qt6). This will change the cache version used by craft [0] Qt5, [1] Qt6 (Default is Qt5): 1 ------------------------------------------------------------------------------------------------------------------------ Select compiler [0] Mingw-w64, [1] Microsoft Visual Studio 2022 (Default is Microsoft Visual Studio 2022): 0 ------------------------------------------------------------------------------------------------------------------------ Craft will use C:\_ to create shorter path during builds. Specify short path root: [C:\_]: ------------------------------------------------------------------------------------------------------------------------ Do you want to install a StartMenu entry [0] Yes, [1] No (Default is Yes): ------------------------------------------------------------------------------------------------------------------------ Do you want to enable the support for colored logs [0] Yes, [1] No (Default is Yes): Requirement already up-to-date: coloredlogs in c:\users\angelika\appdata\roaming\python\python38\site-packages (15.0.1) Requirement already satisfied, skipping upgrade: humanfriendly>=9.1 in c:\users\angelika\appdata\roaming\python\python38\site-packages (from coloredlogs) (10.0) Requirement already satisfied, skipping upgrade: pyreadline3; sys_platform == "win32" and python_version >= "3.8" in c:\users\angelika\appdata\roaming\python\python38\site-packages (from humanfriendly>=9.1->coloredlogs) (3.4.1) WARNING: You are using pip version 19.2.3, however version 23.3.1 is available. You should consider upgrading via the 'python -m pip install --upgrade pip' command. Starting to download https://invent.kde.org/packaging/craft/-/archive/master/craft-master.zip to C:\CraftRoot\download\craft-master.zip [####################################################################################################]100% Execute: C:\Users\Angelika\AppData\Local\Programs\Python\Python38-32\python.exe C:\CraftRoot\craft-tmp\bin\craft.py craft Craft : C:\CraftRoot Version : master ABI : windows-gcc-x86_64 Download directory : C:\CraftRoot\download Cache repository : https://files.kde.org/craft/Qt6/23.11/windows/gcc/x86_64 ======================================================================================================================== *** Handling package: core/cacert, action: all *** *** Action: fetch-binary for core/cacert *** *** core/cacert not found in cache *** *** Action: fetch for core/cacert *** curl https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip Warning: --ssl is an insecure option, consider --ssl-reqd instead curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - Die Sperrfunktion konnte keine Sperrprüfung für das Zertifikat durchführen. Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--max-redirs', '50', '-o', 'C:\\CraftRoot\\download\\archives\\core\\cacert\\cacert-2023-01-10.zip', 'https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip', '--progress-bar'] failed with exit code 35 Downloading: https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip to C:\CraftRoot\download\archives\core\cacert\cacert-2023-01-10.zip 100% ██████████████████████████████████████████████████████████████████████████████████████████████████████████████████░ *** Action: unpack for core/cacert *** Please enable Windows 10 development mode to enable support for symlinks. This will enable faster extractions. https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development *** Action: configure for core/cacert *** *** Action: make for core/cacert *** *** Action: cleanimage for core/cacert *** *** Action: install for core/cacert *** *** Action: post-install for core/cacert *** *** Action: qmerge for core/cacert *** *** Action: post-qmerge for core/cacert *** *** Craft all succeeded: core/cacert after 6s *** ======================================================================================================================== *** Handling package: dev-utils/7zip-base, action: all *** *** Action: fetch-binary for dev-utils/7zip-base *** Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\Users\\Angelika\\AppData\\Local\\Temp\\tmp6dc9wrzs\\manifest.json', 'https://files.kde.org/craft/Qt6/23.11/windows/gcc/x86_64/RelWithDebInfo/manifest.json'] failed with exit code 60 Warning: --ssl is an insecure option, consider --ssl-reqd instead % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Could not find dev-utils/7zip-base=23.01-1 in https://files.kde.org/craft/Qt6/23.11/windows/gcc/x86_64/RelWithDebInfo Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\Users\\Angelika\\AppData\\Local\\Temp\\tmp9pz9eby7\\manifest.json', 'https://files.kde.org/craft/Qt6/23.11/windows/gcc/x86_64/Release/manifest.json'] failed with exit code 60 Warning: --ssl is an insecure option, consider --ssl-reqd instead % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Could not find dev-utils/7zip-base=23.01-1 in https://files.kde.org/craft/Qt6/23.11/windows/gcc/x86_64/Release *** dev-utils/7zip-base not found in cache *** *** Action: fetch for dev-utils/7zip-base *** curl https://files.kde.org/craft/3rdparty/7zip/2301/7z2301-extra.zip Warning: --ssl is an insecure option, consider --ssl-reqd instead curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\CraftRoot\\download\\archives\\dev-utils\\7zip-base\\7z2301-extra.zip', 'https://files.kde.org/craft/3rdparty/7zip/2301/7z2301-extra.zip', '--progress-bar'] failed with exit code 60 Action: fetch for dev-utils/7zip-base:23.01-1 FAILED *** Craft all failed: dev-utils/7zip-base after 1s *** fatal error: package dev-utils/7zip-base all failed Craft stopped with out completing ['dev-utils/7zip-base', 'dev-utils/mingw-w64', 'libs/runtime', 'dev-utils/cmake-base', 'dev-utils/kshimgen', 'dev-utils/7zip', 'dev-utils/cmake', 'dev-utils/wget', 'dev-utils/git', 'python-modules/pip-system', 'python-modules/virtualenv', 'dev-utils/python3', 'python-modules/pip', 'dev-utils/uactools', 'dev-utils/patch', 'dev-utils/sed', 'dev-utils/jom', 'dev-utils/ninja', 'virtual/base', 'craft/craft-core', 'craft/craft-blueprints-kde'] PS C:\CraftRoot> iex ((new-object net.webclient).DownloadString('https://raw.githubusercontent.com/KDE/craft/master/setup/install_craft.ps1')) Start to boostrap Craft. Where to you want us to install Craft Craft install root: [C:\CraftRoot\]: Directory C:\CraftRoot\ already exists. Choose one of the options: [Q] Quit installation [Y] Truncate directory: [C:\CraftRoot\] and continue installation in the same directory [N] Change directory path. (default is 'Q'): y Bestätigung Das Element unter "C:\CraftRoot\build" verfügt über untergeordnete Elemente, und der Recurse-Parameter wurde nicht angegeben. Wenn Sie fortfahren, werden mit dem Element auch alle untergeordneten Elemente entfernt. Möchten Sie den Vorgang wirklich fortsetzen? [J] Ja [A] Ja, alle [N] Nein [K] Nein, keine [H] Anhalten [?] Hilfe (Standard ist "J"): Bestätigung Das Element unter "C:\CraftRoot\craft-tmp" verfügt über untergeordnete Elemente, und der Recurse-Parameter wurde nicht angegeben. Wenn Sie fortfahren, werden mit dem Element auch alle untergeordneten Elemente entfernt. Möchten Sie den Vorgang wirklich fortsetzen? [J] Ja [A] Ja, alle [N] Nein [K] Nein, keine [H] Anhalten [?] Hilfe (Standard ist "J"): Bestätigung Das Element unter "C:\CraftRoot\download" verfügt über untergeordnete Elemente, und der Recurse-Parameter wurde nicht angegeben. Wenn Sie fortfahren, werden mit dem Element auch alle untergeordneten Elemente entfernt. Möchten Sie den Vorgang wirklich fortsetzen? [J] Ja [A] Ja, alle [N] Nein [K] Nein, keine [H] Anhalten [?] Hilfe (Standard ist "J"): Bestätigung Das Element unter "C:\CraftRoot\etc" verfügt über untergeordnete Elemente, und der Recurse-Parameter wurde nicht angegeben. Wenn Sie fortfahren, werden mit dem Element auch alle untergeordneten Elemente entfernt. Möchten Sie den Vorgang wirklich fortsetzen? [J] Ja [A] Ja, alle [N] Nein [K] Nein, keine [H] Anhalten [?] Hilfe (Standard ist "J"): Bestätigung Das Element unter "C:\CraftRoot\logs" verfügt über untergeordnete Elemente, und der Recurse-Parameter wurde nicht angegeben. Wenn Sie fortfahren, werden mit dem Element auch alle untergeordneten Elemente entfernt. Möchten Sie den Vorgang wirklich fortsetzen? [J] Ja [A] Ja, alle [N] Nein [K] Nein, keine [H] Anhalten [?] Hilfe (Standard ist "J"): Downloading: https://raw.githubusercontent.com/KDE/craft/master/setup/CraftBootstrap.py C:\Users\Angelika\AppData\Local\Programs\Python\Python38-32\python.exe C:\CraftRoot\\download\CraftBootstrap.py --prefix C:\CraftRoot\ --branch master Welcome to the Craft setup wizard! Craft will be installed to: C:\CraftRoot\ ------------------------------------------------------------------------------------------------------------------------ Select the version of Qt you want to use (Craft can't mix Qt5 and Qt6). This will change the cache version used by craft [0] Qt5, [1] Qt6 (Default is Qt5): ------------------------------------------------------------------------------------------------------------------------ Select compiler [0] Mingw-w64, [1] Microsoft Visual Studio 2019 (Default is Microsoft Visual Studio 2019): 0 ------------------------------------------------------------------------------------------------------------------------ Craft will use C:\_ to create shorter path during builds. Specify short path root: [C:\_]: ------------------------------------------------------------------------------------------------------------------------ Do you want to install a StartMenu entry [0] Yes, [1] No (Default is Yes): ------------------------------------------------------------------------------------------------------------------------ Do you want to enable the support for colored logs [0] Yes, [1] No (Default is Yes): Requirement already up-to-date: coloredlogs in c:\users\angelika\appdata\roaming\python\python38\site-packages (15.0.1) Requirement already satisfied, skipping upgrade: humanfriendly>=9.1 in c:\users\angelika\appdata\roaming\python\python38\site-packages (from coloredlogs) (10.0) Requirement already satisfied, skipping upgrade: pyreadline3; sys_platform == "win32" and python_version >= "3.8" in c:\users\angelika\appdata\roaming\python\python38\site-packages (from humanfriendly>=9.1->coloredlogs) (3.4.1) WARNING: You are using pip version 19.2.3, however version 23.3.1 is available. You should consider upgrading via the 'python -m pip install --upgrade pip' command. Starting to download https://invent.kde.org/packaging/craft/-/archive/master/craft-master.zip to C:\CraftRoot\download\craft-master.zip [####################################################################################################]100% Execute: C:\Users\Angelika\AppData\Local\Programs\Python\Python38-32\python.exe C:\CraftRoot\craft-tmp\bin\craft.py craft Craft : C:\CraftRoot Version : master ABI : windows-gcc-x86_64 Download directory : C:\CraftRoot\download Cache repository : https://files.kde.org/craft/Qt5/23.11/windows/gcc/x86_64 ======================================================================================================================== *** Handling package: core/cacert, action: all *** *** Action: fetch-binary for core/cacert *** *** core/cacert not found in cache *** *** Action: fetch for core/cacert *** curl https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip Warning: --ssl is an insecure option, consider --ssl-reqd instead curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) - Die Sperrfunktion konnte keine Sperrprüfung für das Zertifikat durchführen. Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--max-redirs', '50', '-o', 'C:\\CraftRoot\\download\\archives\\core\\cacert\\cacert-2023-01-10.zip', 'https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip', '--progress-bar'] failed with exit code 35 Downloading: https://files.kde.org/craft/curl.haxx.se/cacert-2023-01-10.zip to C:\CraftRoot\download\archives\core\cacert\cacert-2023-01-10.zip 100% ██████████████████████████████████████████████████████████████████████████████████████████████████████████████████░ *** Action: unpack for core/cacert *** Please enable Windows 10 development mode to enable support for symlinks. This will enable faster extractions. https://docs.microsoft.com/en-us/windows/uwp/get-started/enable-your-device-for-development *** Action: configure for core/cacert *** *** Action: make for core/cacert *** *** Action: cleanimage for core/cacert *** *** Action: install for core/cacert *** *** Action: post-install for core/cacert *** *** Action: qmerge for core/cacert *** *** Action: post-qmerge for core/cacert *** *** Craft all succeeded: core/cacert after 1s *** ======================================================================================================================== *** Handling package: dev-utils/7zip-base, action: all *** *** Action: fetch-binary for dev-utils/7zip-base *** Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\Users\\Angelika\\AppData\\Local\\Temp\\tmp3le9avkh\\manifest.json', 'https://files.kde.org/craft/Qt5/23.11/windows/gcc/x86_64/RelWithDebInfo/manifest.json'] failed with exit code 60 Warning: --ssl is an insecure option, consider --ssl-reqd instead % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Could not find dev-utils/7zip-base=23.01-1 in https://files.kde.org/craft/Qt5/23.11/windows/gcc/x86_64/RelWithDebInfo Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\Users\\Angelika\\AppData\\Local\\Temp\\tmptd85wjp5\\manifest.json', 'https://files.kde.org/craft/Qt5/23.11/windows/gcc/x86_64/Release/manifest.json'] failed with exit code 60 Warning: --ssl is an insecure option, consider --ssl-reqd instead % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Could not find dev-utils/7zip-base=23.01-1 in https://files.kde.org/craft/Qt5/23.11/windows/gcc/x86_64/Release *** dev-utils/7zip-base not found in cache *** *** Action: fetch for dev-utils/7zip-base *** curl https://files.kde.org/craft/3rdparty/7zip/2301/7z2301-extra.zip Warning: --ssl is an insecure option, consider --ssl-reqd instead curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_IS_PARTIAL_CHAIN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. Command ['C:\\WINDOWS\\system32\\curl.exe', '-C', '-', '--retry', '10', '-L', '--ftp-ssl', '--fail', '--cacert', 'C:\\CraftRoot\\etc\\cacert.pem', '--max-redirs', '50', '-o', 'C:\\CraftRoot\\download\\archives\\dev-utils\\7zip-base\\7z2301-extra.zip', 'https://files.kde.org/craft/3rdparty/7zip/2301/7z2301-extra.zip', '--progress-bar'] failed with exit code 60 Action: fetch for dev-utils/7zip-base:23.01-1 FAILED *** Craft all failed: dev-utils/7zip-base after 0s *** fatal error: package dev-utils/7zip-base all failed Craft stopped with out completing ['dev-utils/7zip-base', 'dev-utils/mingw-w64', 'libs/runtime', 'dev-utils/cmake-base', 'dev-utils/kshimgen', 'dev-utils/7zip', 'dev-utils/cmake', 'dev-utils/wget', 'dev-utils/git', 'python-modules/pip-system', 'python-modules/virtualenv', 'dev-utils/python3', 'python-modules/pip', 'dev-utils/uactools', 'dev-utils/patch', 'dev-utils/sed', 'dev-utils/jom', 'dev-utils/ninja', 'virtual/base', 'craft/craft-core', 'craft/craft-blueprints-kde'] PS C:\CraftRoot> ``` Your error is different to the earlier posters, however files.kde.org does not appear to be the issue here. Can you try downloading the file it is trying to download using a web browser and see which mirror you end up with? It is likely a mirror that has misconfigured their SSL. Seems that closing and reopening the powershell solved the issue |