Skip to content

Fix broken zopen-setup by adding a cert for objects.githubusercontent.com#275

Merged
IgorTodorovskiIBM merged 1 commit intomainfrom
fix_zopen_setup
Apr 27, 2023
Merged

Fix broken zopen-setup by adding a cert for objects.githubusercontent.com#275
IgorTodorovskiIBM merged 1 commit intomainfrom
fix_zopen_setup

Conversation

@IgorTodorovskiIBM
Copy link
Copy Markdown
Member

This is a bit of a hacky/quick fix, we'll most likely phase zopen-setup out with the incoming zopen changes.

This fixes this issue:

Download meta into /u/mvm/zopen/boot
*ERROR* rc: 262 ***
toolkit DIAG: Service[1441793], Reason[8], Desc[Certificate validation error]

FATAL ERROR encountered [Connect]
error downloading  https://github.com/ZOSOpenTools/metaport/releases/download/boot/meta-main.20230227_023657.zos.pax.Z to /u/mvm/zopen/boot/meta-main.20230227_023657.zos.pax.Z: -1
error -1 downloading https://github.com/ZOSOpenTools/metaport/releases/download/boot/meta-main.20230227_023657.zos.pax.Z with PEM file /tmp/zopen_tmp_16842817.pem to /u/mvm/zopen/boot/meta-main.20230227_023657.zos.pax.Z
MVM:/u/mvm: >ping zosopentools.github.io                                                                                                                                           
CS V2R5: Pinging host zosopentools.github.io (185.199.110.153) 
Ping #1 response took 0.034 seconds. (33.949 milliseconds)

It looks like the redirect to objects.githubusercontent.com uses another ca cert. Adding it fixes the issue

Copy link
Copy Markdown
Collaborator

@MikeFultonDev MikeFultonDev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hm. ok... if this needs to stick around for more than a couple weeks maybe it would be good to see if we can just concatentate the pem files together rather than 2?

@IgorTodorovskiIBM
Copy link
Copy Markdown
Member Author

Hm. ok... if this needs to stick around for more than a couple weeks maybe it would be good to see if we can just concatentate the pem files together rather than 2?

I had issues when importing a bundled certificate. I had to split them into individual certs for the gskkyman import to work. If there's a way to import a bundled cert, then yes I agree that would be better.

@IgorTodorovskiIBM IgorTodorovskiIBM merged commit 1b507bf into main Apr 27, 2023
@IgorTodorovskiIBM IgorTodorovskiIBM deleted the fix_zopen_setup branch September 15, 2023 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants