rtpengine

History

Michael Prokop 6ccb8fd789 TT#155450 github/coverity: provide workaround for incomplete SSL chain The recent SSL certificate change on https://scan.coverity.com/ causes an incomplete SSL chain setup, as the "Entrust Certification Authority - L1K" certificate isn't included: \| % curl --verbose https://scan.coverity.com/download/cxx/linux64 \| * Trying 45.60.34.99:443... \| * Connected to scan.coverity.com (45.60.34.99) port 443 (#0) \| [...] \| * TLSv1.3 (OUT), TLS alert, unknown CA (560): \| * SSL certificate problem: unable to get local issuer certificate \| * Closing connection 0 \| curl: (60) SSL certificate problem: unable to get local issuer certificate \| More details here: https://curl.se/docs/sslcerts.html \| \| % echo \| openssl s_client -connect scan.coverity.com:443 2>/dev/null \| CONNECTED(00000003) \| --- \| Certificate chain \| 0 s:C = US, ST = California, L = Mountain View, O = "Synopsys, Inc.", CN = scan.coverity.com \| i:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K \| --- \| Server certificate \| [...] \| subject=C = US, ST = California, L = Mountain View, O = "Synopsys, Inc.", CN = scan.coverity.com \| \| issuer=C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms, OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K \| \| --- \| No client certificate CA names sent \| Peer signing digest: SHA256 \| Peer signature type: RSA-PSS \| Server Temp Key: X25519, 253 bits \| --- \| SSL handshake has read 2301 bytes and written 373 bytes \| Verification error: unable to verify the first certificate \| --- \| New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 \| Server public key is 2048 bit \| Secure Renegotiation IS NOT supported \| Compression: NONE \| Expansion: NONE \| No ALPN negotiated \| Early data was not sent \| Verify return code: 21 (unable to verify the first certificate) \| --- We informed coverity about it, but unless this gets fixed we need a workaround for this, otherwise we have failing GitHub actions due to failing downloads of https://scan.coverity.com/download/cxx/linux64. Change-Id: I53ccac2745bfc80d229598f669312aa5722ed50b		4 years ago
..
coverity.yml	TT#155450 github/coverity: provide workaround for incomplete SSL chain	4 years ago
debpkg.yml	TT#82051 Support GitHub actions + workflows using Debian package builds + shellcheck	6 years ago
shellcheck.yml	TT#111150 Rename GitHub shellcheck test workflow to shellcheck.yml	5 years ago
unit-tests.yml	TT#111150 add top-level make target for asan test	5 years ago