https://hg.nginx.org certificate error ?

George nginx-forum at forum.nginx.org
Tue Apr 9 13:17:47 UTC 2019


Hi when I try to clone njs repo I am getting the error below 

hg clone https://hg.nginx.org/njs/
abort: hg.nginx.org certificate error: certificate is for *.nginx.com,
nginx.com
(configure hostfingerprint
bd:90:5e:95:b4:51:d8:0b:b0:36:41:6f:99:a7:80:01:4e:cf:ee:c2 or use
--insecure to connect insecurely)

and

echo -n | openssl s_client -connect hg.nginx.org:443        
CONNECTED(00000003)
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = *.nginx.com
verify return:1
---
Certificate chain
 0 s:/CN=*.nginx.com
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---

but the web browser hg.nginx.org ssl cert has SAN ssl cert for

DNS Name=hg.nginx.org
DNS Name=mailman.nginx.com
DNS Name=mailman.nginx.org
DNS Name=trac.nginx.org

dig A hg.nginx.org +short 
206.251.255.64

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283686,283686#msg-283686



More information about the nginx mailing list