Hello!

On Tue, Apr 09, 2019 at 09:17:47AM -0400, George wrote:

> Hi when I try to clone njs repo I am getting the error below
>
> hg clone https://hg.nginx.org/njs/
> abort: hg.nginx.org certificate error: certificate is for *.nginx.com,
> nginx.com
> (configure hostfingerprint
> bd:90:5e:95:b4:51:d8:0b:b0:36:41:6f:99:a7:80:01:4e:cf:ee:c2 or use
> --insecure to connect insecurely)

Looks like you are using an outdated hg without SNI support.
Either upgrade, or use http / --insecure / whatever.

> and
>
> echo -n | openssl s_client -connect hg.nginx.org:443
> CONNECTED(00000003)
> depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
> verify return:1
> depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
> verify return:1
> depth=0 CN = *.nginx.com
> verify return:1
> ---
> Certificate chain
> 0 s:/CN=*.nginx.com
> i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
> 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
> i:/O=Digital Signature Trust Co./CN=DST Root CA X3
> ---

That's fine, try

openssl s_client -connect hg.nginx.org:443 -servername hg.nginx.org

instead.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx