SSL Validation failure while installing php5 #590
Comments
|
Same issue. I've isolated the php_545 output I got and pasted below. Host System
Command Output |
|
Same issue. Try to modify php_545.rb. Change link to this https://gist.githubusercontent.com/tassoevan/74a65692bd1ddccec5fb/raw/14d4bd547b022ed80737688d0e7f48bac3c1c951/libxml29_compat.patch. Just like that: In my case it works. |
Host System
in my case it cusses on another php file. I tried to change the source in #590 (comment) to https://prototype.php.net/distributions/php-5.4.5.tar.gz (it's from the official php website). |
|
getting the same error as @stasguma trying to build on Ubuntu 22.04. updating Manjaro box and will try building on that and see what happens edit: tried on manjaro and getting the same there. have tried running it while connected to VPN and not and can download through browser on both |
|
I found a workaround. You need to change the source on line 25 The final result should look like: |
|
but now I have another error. |
|
TLDR; The SSL issue for museum.php.net is due to this distro being on openssl 1.0.1 and due to the I looked into this a bit. @stasguma your most recent error is The original SSL error for me was complaining about an expired certificate: (some of my paths and possibly my error messages are different because I build directly using This is happening because this ubuntu image is using openssl 1.0.1f, which has the same issue as described here for openssl 1.0.2, quoted below:
And that's the issue with museum.php.net, as shown below. An expired cert on DST Root CA X3. (Script below run from a partly-provisioned box): So following the guidance in that openssl site, and reading from
But then the chef provisioner includes its own bundled ca certificates, so I needed to tell it to instead use the distro's list of certs, which I'm currently doing by modifying the chef_solo binary with an environment variable, which was hinted at in a chef github issue: (chef fixed their bundled certs in a later chef version (that cert removed from its own bundled list), but we're stuck on 15.1.36 with this distro.) Provisioning works without an SSL error for the php545 recipe this way, without modifying that recipe. I don't have issues fetching that patch file 🤷 I'll play with this a bit more and maybe think of a more elegant way to remove that cert from the trusted store, probably by modifying an early chef script. |
|
I think this will work: |
deargle
pushed a commit
to deargle/metasploitable3
that referenced
this issue
Jul 13, 2023
see https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/: > The currently recommended certificate chain as presented to Let’s Encrypt ACME clients when new certificates are issued contains an intermediate certificate (ISRG Root X1) that is signed by an old DST Root CA X3 certificate that expires on 2021-09-30. In some cases the OpenSSL 1.0.2 version will regard the certificates issued by the Let’s Encrypt CA as having an expired trust chain. (The Ubuntu VM is on OpenSSL 1.0.1f) closes rapid7#590
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Issue Description
Please check the General Issues section in the wiki before you submit the issue.
If you didn't find your issue mentioned, please give a thorough description of the issue you're seeing.
Also, please be sure to include any troubleshooting steps that you've already attempted.
I've tried the vagrant automatic build for ubuntu 3 times and had the same failure while installing php5.
The url it complains about seems fine when loading in my browser (https://mail.gnome.org/archives/xml/2012-August/txtbgxGXAvz4N.txt) so not sure what's wrong there.
In my third attempt, I also installed the winrm & winrm-fs plugins as per the General Issues but that didn't seem to help.
Thanks for any help!
Host System
Command Output
https://pastebin.com/YjwcbN67
The text was updated successfully, but these errors were encountered: