pimutils / pimutils/vdirsyncer

Invalid certificate issue

Open
#1,176 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
1.9k
Forks
185
Avg merge
11h 49m
Merged PRs (30d)
1

Description

Hello,

I'm trying to get a public ics, but unfortunately the remote certificate is incorrect.
It works for the domain fixture.es, but not for ics.fixture.es,

I've tried retrieveing the SHA256 fingerprint :

echo -n | openssl s_client -connect ics.fixture.es:443 2>/dev/null | openssl x509 -noout -fingerprint -sha256                                                                                                    130 ↵   
SHA256 Fingerprint=99:54:33:73:5C:DD:82:3D:D5:47:31:4E:8C:D5:33:05:A2:A0:FF:86:4F:53:0D:C8:5B:34:C6:E3:93:4C:7F:64

And then setting the following configuration :

[storage edf_public]
type = "http"
url = "https://ics.fixture.es/v2/fr.ics"
verify_fingerprint = "99:54:33:73:5C:DD:82:3D:D5:47:31:4E:8C:D5:33:05:A2:A0:FF:86:4F:53:0D:C8:5B:34:C6:E3:93:4C:7F:64"

But I still have the following error

58f3f993f01a:/vdirsyncer/status$ vdirsyncer sync --force-delete edf
Syncing edf
error: Unknown error occurred for edf: (b'\x99T3s\\\xdd\x82=\xd5G1N\x8c\xd53\x05\xa2\xa0\xff\x86OS\r\xc8[4\xc6\xe3\x93L\x7fd', b"\xf93\xb3\x06>\x9c\xef' U\xa6U`\xca\x04:b\xe2\xd1\xee\x04\xf3\x06\xd5\x9f\x83\xab\x9e+c\x1e\x1d", '206.189.241.187', 443)
error: Use `-vdebug` to see the full traceback.

Am I missing something from the doc ?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the HTTP storage configuration and the verify_fingerprint setting, then reproduce the reported command with -vdebug for the two certificate fingerprints shown. Done means determining whether the configured fingerprint is expected to work for ics.fixture.es and documenting or correcting the observed certificate-validation behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
cli, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.