[alsa-devel] ftp.alsa-project.org connection problems

[Michael Niedermayer]

On Mon, Feb 25, 2019 at 09:43:47PM +0100, Michael Niedermayer wrote:
> On Mon, Feb 25, 2019 at 08:52:33PM +0100, Jaroslav Kysela wrote:
> > Dne 25. 02. 19 v 19:04 Michael Niedermayer napsal(a):
> > > Hi
> > > 
> > > Iam not sure this is the correct place to report this to but i didnt see it
> > > being reported anywhere yet on the ML archive or google
> > 
> > ...
> > 
> > > ==> PASV ... couldn't connect to 207.180.221.201 port 35333: No route to host
> > Hi,
> > 
> >   it seems that the ftp conntrack module was not loaded correctly after
> > reboot, so the firewall blocks the passive connections. Could you give a
> > try again?
> 
> works fine locally
> 
> Thanks!

Another related issue
we tried to switch to https and that fails too with wget but works with browsers
It appears this is due to a incomplete certificate chain

https://www.ssllabs.com/ssltest/analyze.html?d=www.alsa-project.org&hideResults=on
"This server's certificate chain is incomplete. Grade capped to B."

IIRC we had a similar issue on one of our servers too, required certificates to be
concatenated together, so might be thats the same, or not ...

wget https://www.alsa-project.org/files/pub/lib/alsa-lib-1.1.0.tar.bz2
--2019-02-28 12:53:25--  https://www.alsa-project.org/files/pub/lib/alsa-lib-1.1.0.tar.bz2
Resolving www.alsa-project.org (www.alsa-project.org)... 207.180.221.201
Connecting to www.alsa-project.org (www.alsa-project.org)|207.180.221.201|:443... connected.
ERROR: cannot verify www.alsa-project.org's certificate, issued by ‘/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3’:
  Unable to locally verify the issuer's authority.
  
  [...]


-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

"You are 36 times more likely to die in a bathtub than at the hands of a
terrorist. Also, you are 2.5 times more likely to become a president and
2 times more likely to become an astronaut, than to die in a terrorist
attack." -- Thoughty2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://mailman.alsa-project.org/pipermail/alsa-devel/attachments/20190228/fe16ea1a/attachment.sig>