Skip to content

Conversation

@mariash
Copy link
Member

@mariash mariash commented Aug 24, 2023

Submodule src/code.cloudfoundry.org/cacheddownloader 55ed57674..fe2e12402:

Use native x509 package instead of custom systemcerts
Submodule src/code.cloudfoundry.org/executor 28150c7..f0f102f:
Use native x509 package instead of custom systemcerts

Accepted by performing the following:

  1. created a custom server with self-signed certificate listening on 9091.
  2. configured cc_uploader hostname to custom server URL.
  3. cf push Nora to windows fails during staging upload with tls: failed to verify certificate: x509: certificate signed by unknown authority
  4. added certificate to the root store on windows cell:
    Import-Certificate -FilePath C:\var\vcap\server.pem -CertStoreLocation Cert:\LocalMachine\Root\
  5. cf push Nora staging succeeds

Please make sure to complete the following steps

  • Check the Contributing document on how to sign the CLA and run tests in diego-release.
  • Make sure a pull request is done against the develop branch.

Thank you!

Submodule src/code.cloudfoundry.org/cacheddownloader 55ed57674..fe2e12402:
  > Use native x509 package instead of custom systemcerts
Submodule src/code.cloudfoundry.org/executor 28150c7..f0f102f:
  > Use native x509 package instead of custom systemcerts
@mariash mariash requested a review from a team as a code owner August 24, 2023 19:25
@geofffranks geofffranks merged commit 55f21ca into develop Aug 25, 2023
jrussett added a commit that referenced this pull request Aug 25, 2023
This is a follow up to: #808

We don't need to sync code.cloudfoundry.org/systemcerts anymore because
we removed it.

Fixes:
```
+ ./scripts/sync-submodule-config
+ export PATH=/tmp/build/a22dd28d/diego-release/bin:/root/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/tmp/build/a22dd28d/diego-release/bin
+ PATH=/tmp/build/a22dd28d/diego-release/bin:/root/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/tmp/build/a22dd28d/diego-release/bin
+ mkdir -p bin
+ cd src/gosub
+ go build -o ../../bin/gosub .
+ FORCE_SUBMODULE_HTTPS=true
+ rm -rf /tmp/packages
+ cat
+ cat /tmp/packages
+ xargs -s 1048576 gosub sync --force-https=true
failed to get dependency repo: chdir /tmp/build/a22dd28d/diego-release/src/code.cloudfoundry.org/systemcerts: no such file or directory
```

[#184870112](https://www.pivotaltracker.com/story/show/184870112)
ameowlia pushed a commit that referenced this pull request Aug 25, 2023
This is a follow up to: #808

We don't need to sync code.cloudfoundry.org/systemcerts anymore because
we removed it.

Fixes:
```
+ ./scripts/sync-submodule-config
+ export PATH=/tmp/build/a22dd28d/diego-release/bin:/root/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/tmp/build/a22dd28d/diego-release/bin
+ PATH=/tmp/build/a22dd28d/diego-release/bin:/root/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/tmp/build/a22dd28d/diego-release/bin
+ mkdir -p bin
+ cd src/gosub
+ go build -o ../../bin/gosub .
+ FORCE_SUBMODULE_HTTPS=true
+ rm -rf /tmp/packages
+ cat
+ cat /tmp/packages
+ xargs -s 1048576 gosub sync --force-https=true
failed to get dependency repo: chdir /tmp/build/a22dd28d/diego-release/src/code.cloudfoundry.org/systemcerts: no such file or directory
```

[#184870112](https://www.pivotaltracker.com/story/show/184870112)
@mariash mariash deleted the systemcerts branch August 28, 2023 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants