freedesktop - Feb 2016 - [fdo] https://cgit.freedesktop.org wrong ssl cert

Is there any plan to fix this:

[root at 7af579e3aefc /]# curl -vvv
https://cgit.freedesktop.org/xorg/proto/xproto/plain/COPYING
* About to connect() to cgit.freedesktop.org port 443
*   Trying 131.252.210.161... connected
* Connected to cgit.freedesktop.org (131.252.210.161) port 443
* successfully set certificate verify locations:
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSLv2, Client hello (1):
SSLv3, TLS handshake, Server hello (2):
SSLv3, TLS handshake, CERT (11):
SSLv3, TLS handshake, Server key exchange (12):
SSLv3, TLS handshake, Server finished (14):
SSLv3, TLS handshake, Client key exchange (16):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSL connection using DHE-RSA-AES128-SHA
* Server certificate:
* subject: /CN=anongit.freedesktop.org
* start date: 2016-02-07 14:25:00 GMT
* expire date: 2016-05-07 14:25:00 GMT
* SSL: certificate subject name 'anongit.freedesktop.org' does not match
target host name 'cgit.freedesktop.org'


Because it's breaking a lot of builds :(
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/freedesktop/attachments/20160209/d067096a/attachment.html>

]] Alan Scherger 
> Is there any plan to fix this:
[…]
> Because it's breaking a lot of builds :(
I suspect you're using an ancient version of curl that doesn't support
SNI.  Upgrade to something from this decade?

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are

Indeed I was! My version of openssl doesn't support SNI, which our servers
use for SSL connections. Getting openssl 0.9.8f on Centos 5 is a challenge,
but it certainly isn't the problem of freedesktop.org. I will persevere and
find another way - thanks for the help!

Alan Scherger

On Tue, Feb 9, 2016 at 12:59 PM Tollef Fog Heen <tfheen at err.no> wrote:
> ]] Alan Scherger
>
> > Is there any plan to fix this:
> […]
> > Because it's breaking a lot of builds :(
>
> I suspect you're using an ancient version of curl that doesn't
support
> SNI.  Upgrade to something from this decade?
>
> --
> Tollef Fog Heen
> UNIX is user friendly, it's just picky about who its friends are
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freedesktop.org/archives/freedesktop/attachments/20160209/d4988b8c/attachment.html>