make file in new release of OA contains https type of url which drush make doesn't support.

191 libraries[translations][download][type] = "get"
192 libraries[translations][download][url] = "https://translate.openatrium.com/sites/translate.openatrium.com/files/atrium-installer-beta9.tar.gz"
193 libraries[translations][directory_name] = "translations"

Comments

Yura’s picture

Yura commented
Title: url type of https causes error » ssl verification causes error
Category: bug » support

Seems SSL certificate of source has a problem.

root@unknown:~# curl -LOD ./test 'https://translate.openatrium.com/sites/translate.openatrium.com/files/atrium-installer-beta9.tar.gz'

curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
danepowell’s picture

danepowell commented
Priority: Normal » Critical

I am also seeing this. And when I visit https://community.openatrium.com using Firefox, I get certificate errors.

There is also an issue on this in the Open Atrium community queue: https://community.openatrium.com/issues/node/2337

thrnio’s picture

thrnio commented

It looks like this might be the problem: https://knowledge.geotrust.com/support/knowledge-base/index?page=content...

It seems GeoTrust changed something last year that requires a slightly more complicated certificate setup than previously was required, and if not properly configured, the certificate will be rejected by some user agents, likely including curl/wget.

danepowell’s picture

danepowell commented

So it seems that Open Atrium needs to install the 'intermediate CA' on their web server?

davidtrainer’s picture

davidtrainer commented

Having the same issue.

Yura’s picture

Yura commented

They can just remove the ssl redirection on translate.openatrium.com I guess. What is the reason for that?

leenx’s picture

leenx commented

sub - Would like to see when this get's fixed so I can build my next Aegir platform try migrate to the lates Open Atrium release as soon as possible.

davidtrainer’s picture

davidtrainer commented
Status: Active » Closed (fixed)

This appears to be fixed.

davidtrainer’s picture

davidtrainer commented
Status: Closed (fixed) » Active

I swear, it worked yesterday.

Today, same error.

Yura’s picture

Yura commented

I think translation server is no longer maintained or monitored. Long time it has several misconfiguration issues.

themusician’s picture

themusician commented

This is still broken as of 10-07-2011. It is not possible to create a new OA platform in Aegir with this being broken, nor does the --working-copy flag resolve this if I try to build it by hand. It is a shame because the make file works wonderfully besides this issue.

Current Error:
Unable to download translations from https://translate.openatrium.com/sites/translate.openatrium.com/files/at....

I am using the stub file located at https://community.openatrium.com/documentation-en/node/1420.

danepowell’s picture

danepowell commented

I can't believe there's been no response from OA on this on any front... this makes it nearly impossible to install OA via Drush.

themusician’s picture

themusician commented

I got around this by downloading the make file to a local location and commented out the translation stuff. That solved it for me.

leenx’s picture

leenx commented

Mmm, interesting idea. Might just work for us too. Seeing that we don't need the translation either.

Thanks
LeeT

leenx’s picture

leenx commented

Simple way to get around this problem, was to enable insecure https downloads for curl.

echo "insecure" >> ~/.curlrc

or with a nice reminder ...

echo -e "\n#drush make https work around \ninsecure\n" >> ~/.curlrc

When you done, just edit the .curlrc file and hash out the insecure until next time.

Hope this helps
LeeT

ergonlogic’s picture

ergonlogic
he/him
Primary language English
Location Montréal, Québec 🇨🇦
commented
Version: » 6.x-1.2
Category: support » bug

A somewhat simpler solution is to just use drush make's '--force-complete' option, thus basically telling it to just ignore the error. Unfortunately, if you happen to have other errors in the same platform build, drush make will happily ignore them as well.

Also, this is a bug, since the makefile shipped with the Open Atrium profile is essentially unusable as is.

AquaticDisorder’s picture

AquaticDisorder commented

I am using the BOA setup of Aegir from http://omega8.cc

libraries[translations][download][url] = "https://translate.openatrium.com/sites/translate.openatrium.com/files/at..."

Although I build OA direct from the makefile instead of using the automatic platform I still use omega8cc url for the translations. :)

j0nathan’s picture

j0nathan commented

Same issue from:

projects[openatrium][type] = profile
projects[openatrium][download][type] = git
projects[openatrium][download][url] = git://drupalcode.org/project/openatrium.git
projects[openatrium][download][tag] = 6.x-1.3
mpotter’s picture

mpotter commented
Status: Active » Closed (won't fix)

Closing old D6 issues.

mpotter’s picture

mpotter commented
Issue summary: View changes

SSL verification problem is the reason actually