From nobody@FreeBSD.org  Fri Jan 31 23:35:21 2014
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1])
	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by hub.freebsd.org (Postfix) with ESMTPS id 50F9447C
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 31 Jan 2014 23:35:21 +0000 (UTC)
Received: from oldred.freebsd.org (oldred.freebsd.org [IPv6:2001:1900:2254:206a::50:4])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mx1.freebsd.org (Postfix) with ESMTPS id 3CAFA1514
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 31 Jan 2014 23:35:21 +0000 (UTC)
Received: from oldred.freebsd.org ([127.0.1.6])
	by oldred.freebsd.org (8.14.5/8.14.7) with ESMTP id s0VNZKWk083834
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 31 Jan 2014 23:35:20 GMT
	(envelope-from nobody@oldred.freebsd.org)
Received: (from nobody@localhost)
	by oldred.freebsd.org (8.14.5/8.14.5/Submit) id s0VNZKY0083826;
	Fri, 31 Jan 2014 23:35:20 GMT
	(envelope-from nobody)
Message-Id: <201401312335.s0VNZKY0083826@oldred.freebsd.org>
Date: Fri, 31 Jan 2014 23:35:20 GMT
From: Matthew Pounsett <matt@conundrum.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: SSL error for svn connecting to https://svn0.us-east.freebsd.org
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         186315
>Category:       misc
>Synopsis:       SSL error for svn connecting to https://svn0.us-east.freebsd.org
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    zi
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jan 31 23:40:01 UTC 2014
>Closed-Date:    Sat Feb 01 14:25:17 UTC 2014
>Last-Modified:  Sat Feb  1 14:30:00 UTC 2014
>Originator:     Matthew Pounsett
>Release:        FreeBSD 9.2-RELEASE
>Organization:
>Environment:
FreeBSD localhost 9.2-RELEASE-p3 FreeBSD 9.2-RELEASE-p3 #0: Sat Jan 11 03:25:02 UTC 2014     root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64

>Description:
Subversion is unable to negotiate an SSL connection with https://svn0.us-east.freebsd.org.   It consistently results in the error:
svn: E120171: Unable to connect to a repository at URL 'https://svn0.us-east.freebsd.org/base/releng/9.2'
svn: E120171: Error running context: An error occurred during SSL communication

The problem started somewhere between 2014/01/17 and 2014/01/29.   Although it looks as if it cropped up at some point earlier as well, as reported at http://forums.freebsd.org/viewtopic.php?f=4&t=44508&p=248358#p248358

Web browsers don't seem to have any trouble connecting to the same URL.


>How-To-Repeat:
Install a new 9.2-RELEASE system
build the subversion port
run:
# svn co https://svn0.us-east.freebsd.org/base/releng/9.2 /usr/src

Also repeatable with any working copy previously checked out from https://svn0.us-east.freebsd.org.  


>Fix:


>Release-Note:
>Audit-Trail:

From: Glen Barber <gjb@FreeBSD.org>
To: Matthew Pounsett <matt@conundrum.com>
Cc: freebsd-gnats-submit@FreeBSD.org
Subject: Re: misc/186315: SSL error for svn connecting to
 https://svn0.us-east.freebsd.org
Date: Fri, 31 Jan 2014 18:53:05 -0500

 --jRHKVT23PllUwdXP
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 On Fri, Jan 31, 2014 at 11:35:20PM +0000, Matthew Pounsett wrote:
 > Subversion is unable to negotiate an SSL connection with
 > https://svn0.us-east.freebsd.org.   It consistently results in the
 > error:
 > svn: E120171: Unable to connect to a repository at URL 'https://svn0.us-e=
 ast.freebsd.org/base/releng/9.2'
 > svn: E120171: Error running context: An error occurred during SSL communi=
 cation
 >=20
 
 Is this during initial checkout, or an update?
 
 Please provide output from 'pkg info subversion'.
 
 Glen
 
 
 --jRHKVT23PllUwdXP
 Content-Type: application/pgp-signature
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.22 (FreeBSD)
 
 iQIcBAEBCAAGBQJS7DdhAAoJELls3eqvi17QqEwP/Ahdnvg6o8jA3+GFZi4uk2kb
 aEws/A8XEziEyjn8RCs8Q6jjsrutB83UM9Wm4+I8QCbbKlOUKj+MixoWG18okNep
 IEK219CX4JDqxesqEp+1Mjq5VPbvJ93CTWFm6ZJGl596pd4KV3ljd6r0ZuTz2XNZ
 FYboelwZywMN1hOnyE+KCC1760aWi5a21tjeYEnvmwXOvR9FWSF4trGj5S72dqqf
 PXak9U6+gtOzZuvNxr1js/UCrq6Dsiaikc1AX3NZ1zpP3bq1E4iArvNBpnyWxmRh
 oDxqz1Xfi8voN+Du6KTNUGpVqsPuZ2xkb9OhIuIVcYe6QHFHm95fzjt6jUmfhfun
 OOjx5OY6dFs8BZyyUsdYyls1T3g32SY53Bxv3unE2O60sW1Cazzo2vDYu7BcG1QR
 /AubdbjgdZd1xexfAf13WCc1Lflh/K2bgHuIWPQv3ok0H0dqJ1eGvunHbMYHt5/A
 0wjy/ozZPyMZjuh5pwb+icUe9iRD6uRdfqurj7Yse5+sGnESjBqpdqSRWNjb6WuL
 MuTPbpOagZxDM04yGn1OiArnuD+Q6tqheH0C0lFN0j6173mYXdV+bQL8VQCmV3oe
 jBp98m1lnor8hh7ZGjEODy/dEv22NCGjqT7ED90qreBXfAz+m7qdfWYlHRnoi3h6
 esCc8fND1v/AHz5+X4So
 =rruY
 -----END PGP SIGNATURE-----
 
 --jRHKVT23PllUwdXP--
Responsible-Changed-From-To: freebsd-bugs->zi 
Responsible-Changed-By: zi 
Responsible-Changed-When: Sat Feb 1 00:09:24 UTC 2014 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=186315 

From: Matthew Pounsett <matt@conundrum.com>
To: bug-followup@FreeBSD.org,
 Matthew Pounsett <matt@conundrum.com>
Cc:  
Subject: Re: misc/186315: SSL error for svn connecting to https://svn0.us-east.freebsd.org
Date: Fri, 31 Jan 2014 19:05:49 -0500

 > Is this during initial checkout, or an update?
 
 As noted in the =93How To Repeat=94 section, it=92s with both.
 
 > Please provide output from 'pkg info subversion=92.
 
 Brand new system with a fresh ports tree:
 
 subversion-1.8.5
 Name           : subversion
 Version        : 1.8.5
 Origin         : devel/subversion
 Architecture   : freebsd:9:x86:64
 Prefix         : /usr/local
 Categories     : devel
 Licenses       : APACHE20
 Maintainer     : lev@FreeBSD.org
 WWW            : http://subversion.apache.org/
 Comment        : Version control system
 Options        :
 	BDB            : off
 	DOCS           : on
 	FREEBSD_TEMPLATE: on
 	GNOME_KEYRING  : off
 	KDE_KWALLET    : off
 	MAINTAINER_DEBUG: off
 	MOD_DAV_SVN    : off
 	NLS            : on
 	P4_STYLE_MARKERS: on
 	SASL           : off
 	SERF           : on
 	STATIC         : off
 	SVNSERVE_WRAPPER: off
 	TEST           : off
 	TOOLS          : off
 Shared Libs required:
 	libsvn_wc-1.so.0
 	libsvn_subr-1.so.0
 	libsvn_repos-1.so.0
 	libsvn_ra_svn-1.so.0
 	libsvn_ra_serf-1.so.0
 	libsvn_ra_local-1.so.0
 	libsvn_ra-1.so.0
 	libsvn_fs_util-1.so.0
 	libsvn_fs_fs-1.so.0
 	libsvn_fs-1.so.0
 	libsvn_diff-1.so.0
 	libsvn_delta-1.so.0
 	libsvn_client-1.so.0
 	libsqlite3.so.8
 	libserf-1.so.1
 	libintl.so.9
 	libiconv.so.3
 	libexpat.so.6
 	libaprutil-1.so.5
 	libapr-1.so.4
 Shared Libs provided:
 	libsvn_wc-1.so.0
 	libsvn_subr-1.so.0
 	libsvn_repos-1.so.0
 	libsvn_ra_svn-1.so.0
 	libsvn_ra_serf-1.so.0
 	libsvn_ra_local-1.so.0
 	libsvn_ra-1.so.0
 	libsvn_fs_util-1.so.0
 	libsvn_fs_fs-1.so.0
 	libsvn_fs-1.so.0
 	libsvn_diff-1.so.0
 	libsvn_delta-1.so.0
 	libsvn_client-1.so.0
 Flat size      : 14.3MiB
 Description    :
 Subversion is a version control system designed to be as similar to =
 cvs(1)=20
 as possible, while fixing many outstanding problems with cvs(1).
 
 WWW: http://subversion.apache.org/
 

From: Ryan Steinmetz <zi@FreeBSD.org>
To: Matthew Pounsett <matt@conundrum.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: misc/186315: SSL error for svn connecting to
 https://svn0.us-east.freebsd.org
Date: Fri, 31 Jan 2014 19:39:43 -0500

 Matthew,
 
 This should be fixed, can you confirm?
 
 Thanks,
 -r
 

From: Matthew Pounsett <matt@conundrum.com>
To: bug-followup@FreeBSD.org,
 Matthew Pounsett <matt@conundrum.com>
Cc:  
Subject: Re: misc/186315: SSL error for svn connecting to https://svn0.us-east.freebsd.org
Date: Fri, 31 Jan 2014 23:17:08 -0500

 Yes, this seems to be corrected.
 
 root@tinder:/usr/src # svn relocate =
 https://svn0.us-east.freebsd.org/base/releng/9.2
 Error validating server certificate for =
 'https://svn0.us-east.freebsd.org:443':
  - The certificate is not issued by a trusted authority. Use the
    fingerprint to validate the certificate manually!
 Certificate information:
  - Hostname: svn0.us-east.FreeBSD.org
  - Valid: from Jul 29 22:01:21 2013 GMT until Dec 13 22:01:21 2040 GMT
  - Issuer: clusteradm, FreeBSD.org, CA, US(clusteradm@FreeBSD.org)
  - Fingerprint: =
 1C:BD:85:95:11:9F:EB:75:A5:4B:C8:A3:FE:08:E4:02:73:06:1E:61
 (R)eject, accept (t)emporarily or accept (p)ermanently? p
 root@tinder:/usr/src # svn update
 Updating '.':
 At revision 261342.
 
 
 For future reference (since this seems to have cropped up more than =
 once) can you expand on what was broken and what was necessary to fix =
 it?
 
 
State-Changed-From-To: open->closed 
State-Changed-By: zi 
State-Changed-When: Sat Feb 1 14:25:16 UTC 2014 
State-Changed-Why:  
Fixed, monitoring added! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=186315 

From: Ryan Steinmetz <zi@FreeBSD.org>
To: Matthew Pounsett <matt@conundrum.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: misc/186315: SSL error for svn connecting to
 https://svn0.us-east.freebsd.org
Date: Sat, 1 Feb 2014 09:25:02 -0500

 I've created an internal test to check for this situation and alert us
 if it surfaces again.
 
 -r
>Unformatted:
