[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[MirageOS-devel] Problem with ocaml.janestreet.com TLS cert?


I seem to be having a problem with the Jane Street TLS cert for
ocaml.janestreet.com. OPAM is refusing to install sexplib etc as a
result. I presume this is a curl TLS issue and I need a magic
environment variable or something, but can't find it. Any ideas?

This is on OSX using homebrew curl and OPAM 1.2.0.

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01
--:--:--     0curl: (56) SSLRead() return error -9841
is not available
[ERROR] Could not download archives of sexplib.112.24.01

'opam upgrade --verbose sexplib' failed.

FWIW, visiting the site, Chrome complains:

"The identity of this website has been verified by VeriSign Class 3
Secure Server CA - G3 but does not have public audit records.

The site is using outdated security settings that may prevent future
versions of Chrome from being able to safely access it."


"Your connection to ocaml.janestreet.com is encrypted with obsolete

The connection uses TLS 1.2.

The connection is encrypted and authenticated using AES_128_GCM and
uses RSA as the key exchange mechanism."

Richard Mortier

MirageOS-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.