[{"id":1784112,"web_url":"http://patchwork.ozlabs.org/comment/1784112/","msgid":"<20171010222543.0beed48d@windsurf.lan>","list_archive_url":null,"date":"2017-10-10T20:25:43","subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","submitter":{"id":2230,"url":"http://patchwork.ozlabs.org/api/people/2230/","name":"Thomas Petazzoni","email":"thomas.petazzoni@free-electrons.com"},"content":"Hello,\n\nOn Sat,  2 Sep 2017 23:29:38 +0200, Thomas Petazzoni wrote:\n> A number of autobuilder failures are due to the fact that autobuilder\n> instances use old distributions, with old SSL certificates, and\n> therefore wget aborts with an error \"The certificate of `xyz.org' is\n> not trusted.\".\n> \n> In order to avoid such failures that are not very interesting in the\n> context of the autobuilders, we pass --no-check-certificate to\n> wget. The integrity of the downloaded files is anyway verified by the\n> hashes, and this is only meant to be used in the context of\n> testing/CI, not in production.\n> \n> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>\n\nWould it be possible to get some feedback on this patch?\n\nWe recently bump dbus to 1.10.24, and look how the autobuilders are\n\"polluted\" by this certificate issue:\nhttp://autobuild.buildroot.net/?reason=dbus-1.10.24.\n\nWe've got two options: either we do it in utils/genrandconfig as\nproposed, or we do it in the autobuild-run script that runs on the\nautobuilder slaves.\n\nComments ?\n\nThanks,\n\nThomas","headers":{"Return-Path":"<buildroot-bounces@busybox.net>","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.137; helo=fraxinus.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=<UNKNOWN>)","Received":["from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3yBTCD46lMz9t61\n\tfor <incoming@patchwork.ozlabs.org>;\n\tWed, 11 Oct 2017 07:26:00 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id A95A488B1C;\n\tTue, 10 Oct 2017 20:25:58 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id etSt0JiAMRpn; Tue, 10 Oct 2017 20:25:57 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id D1FD088B11;\n\tTue, 10 Oct 2017 20:25:57 +0000 (UTC)","from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n\tby ash.osuosl.org (Postfix) with ESMTP id 637C41C232E\n\tfor <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 20:25:56 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id 4711A89457\n\tfor <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 20:25:56 +0000 (UTC)","from hemlock.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id R6Z-OryQ3Giu for <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 20:25:54 +0000 (UTC)","from mail.free-electrons.com (mail.free-electrons.com [62.4.15.54])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id B70A789290\n\tfor <buildroot@buildroot.org>; Tue, 10 Oct 2017 20:25:54 +0000 (UTC)","by mail.free-electrons.com (Postfix, from userid 110)\n\tid 791B8208EF; Tue, 10 Oct 2017 22:25:52 +0200 (CEST)","from windsurf.lan (LFbn-1-15130-153.w86-206.abo.wanadoo.fr\n\t[86.206.236.153])\n\tby mail.free-electrons.com (Postfix) with ESMTPSA id 46D1B208F4;\n\tTue, 10 Oct 2017 22:25:42 +0200 (CEST)"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","Date":"Tue, 10 Oct 2017 22:25:43 +0200","From":"Thomas Petazzoni <thomas.petazzoni@free-electrons.com>","To":"buildroot@buildroot.org, Arnout Vandecappelle <arnout@mind.be>, Peter\n\tKorsgaard <peter@korsgaard.com>,\n\t\"Yann E. MORIN\" <yann.morin.1998@free.fr>","Message-ID":"<20171010222543.0beed48d@windsurf.lan>","In-Reply-To":"<20170902212938.23712-1-thomas.petazzoni@free-electrons.com>","References":"<20170902212938.23712-1-thomas.petazzoni@free-electrons.com>","Organization":"Free Electrons","X-Mailer":"Claws Mail 3.15.1-dirty (GTK+ 2.24.31; x86_64-redhat-linux-gnu)","MIME-Version":"1.0","Subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.busybox.net>","List-Unsubscribe":"<http://lists.busybox.net/mailman/options/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=unsubscribe>","List-Archive":"<http://lists.busybox.net/pipermail/buildroot/>","List-Post":"<mailto:buildroot@busybox.net>","List-Help":"<mailto:buildroot-request@busybox.net?subject=help>","List-Subscribe":"<http://lists.busybox.net/mailman/listinfo/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" <buildroot-bounces@busybox.net>"}},{"id":1784159,"web_url":"http://patchwork.ozlabs.org/comment/1784159/","msgid":"<f8f82c6a-f51a-8fe6-dc3a-dfc061dd7955@mind.be>","list_archive_url":null,"date":"2017-10-10T21:25:03","subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","submitter":{"id":11809,"url":"http://patchwork.ozlabs.org/api/people/11809/","name":"Arnout Vandecappelle","email":"arnout@mind.be"},"content":"On 10-10-17 22:25, Thomas Petazzoni wrote:\n> Hello,\n> \n> On Sat,  2 Sep 2017 23:29:38 +0200, Thomas Petazzoni wrote:\n>> A number of autobuilder failures are due to the fact that autobuilder\n>> instances use old distributions, with old SSL certificates, and\n>> therefore wget aborts with an error \"The certificate of `xyz.org' is\n>> not trusted.\".\n\n I don't understand how this can happen. The autobuilders should all be running\nsupported (not EOL) distros, right? And in a supported distro, I'd expect\nca-certificates get updated. Otherwise the distro becomes next to useless.\n\n But I seem to remember that you have a CentOS 5 autobuilder running, and CentOS\n5 went EOL on March 31, 2017. So perhaps it's time to switch to CentOS 6?\n\n\n>> In order to avoid such failures that are not very interesting in the\n>> context of the autobuilders\n\n I think they *are* interesting (not very, but still interesting), because\nactual users *will* hit these problems.\n\n>> , we pass --no-check-certificate to\n>> wget. The integrity of the downloaded files is anyway verified by the\n>> hashes, and this is only meant to be used in the context of\n>> testing/CI, not in production.\n>>\n>> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>\n> \n> Would it be possible to get some feedback on this patch?\n> \n> We recently bump dbus to 1.10.24, and look how the autobuilders are\n> \"polluted\" by this certificate issue:\n> http://autobuild.buildroot.net/?reason=dbus-1.10.24.\n\n But once Peter updates sources.buildroot.org that should be OK again, no?\n\n Regards,\n Arnout\n\n> \n> We've got two options: either we do it in utils/genrandconfig as\n> proposed, or we do it in the autobuild-run script that runs on the\n> autobuilder slaves.\n> \n> Comments ?\n> \n> Thanks,\n> \n> Thomas\n>","headers":{"Return-Path":"<buildroot-bounces@busybox.net>","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.137; helo=fraxinus.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=<UNKNOWN>)","Received":["from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3yBVXB0YGJz9t6C\n\tfor <incoming@patchwork.ozlabs.org>;\n\tWed, 11 Oct 2017 08:25:45 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id CE74F88BCA;\n\tTue, 10 Oct 2017 21:25:43 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id jHDCiA3BRP6w; Tue, 10 Oct 2017 21:25:42 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 405F788BBE;\n\tTue, 10 Oct 2017 21:25:42 +0000 (UTC)","from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\tby ash.osuosl.org (Postfix) with ESMTP id 039B81C0C51\n\tfor <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 21:25:40 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id EA13A89450\n\tfor <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 21:25:39 +0000 (UTC)","from whitealder.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id JEIdA8MdNi4n for <buildroot@lists.busybox.net>;\n\tTue, 10 Oct 2017 21:25:38 +0000 (UTC)","from exchange.essensium.com (220.77.144.195.ipv4.evonet.be\n\t[195.144.77.220])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id 59455885AF\n\tfor <buildroot@buildroot.org>; Tue, 10 Oct 2017 21:25:38 +0000 (UTC)","from [10.8.0.14] (10.3.7.11) by beleexch01.local.ess-mail.com\n\t(10.3.7.8) with Microsoft SMTP Server (TLS) id 15.0.847.32;\n\tTue, 10 Oct 2017 23:25:12 +0200"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","To":"Thomas Petazzoni <thomas.petazzoni@free-electrons.com>,\n\t<buildroot@buildroot.org>, Peter Korsgaard <peter@korsgaard.com>,\n\t\"Yann E. MORIN\" <yann.morin.1998@free.fr>","References":"<20170902212938.23712-1-thomas.petazzoni@free-electrons.com>\n\t<20171010222543.0beed48d@windsurf.lan>","From":"Arnout Vandecappelle <arnout@mind.be>","Organization":"Essensium/Mind","Message-ID":"<f8f82c6a-f51a-8fe6-dc3a-dfc061dd7955@mind.be>","Date":"Tue, 10 Oct 2017 23:25:03 +0200","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101\n\tThunderbird/52.3.0","MIME-Version":"1.0","In-Reply-To":"<20171010222543.0beed48d@windsurf.lan>","Content-Language":"en-GB","X-Originating-IP":"[10.3.7.11]","X-ClientProxiedBy":"beleexch01.local.ess-mail.com (10.3.7.8) To\n\tbeleexch01.local.ess-mail.com (10.3.7.8)","Subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.busybox.net>","List-Unsubscribe":"<http://lists.busybox.net/mailman/options/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=unsubscribe>","List-Archive":"<http://lists.busybox.net/pipermail/buildroot/>","List-Post":"<mailto:buildroot@busybox.net>","List-Help":"<mailto:buildroot-request@busybox.net?subject=help>","List-Subscribe":"<http://lists.busybox.net/mailman/listinfo/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" <buildroot-bounces@busybox.net>"}},{"id":1784318,"web_url":"http://patchwork.ozlabs.org/comment/1784318/","msgid":"<20171011085340.48fe6e73@windsurf.lan>","list_archive_url":null,"date":"2017-10-11T06:53:40","subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","submitter":{"id":2230,"url":"http://patchwork.ozlabs.org/api/people/2230/","name":"Thomas Petazzoni","email":"thomas.petazzoni@free-electrons.com"},"content":"Hello,\n\nOn Tue, 10 Oct 2017 23:25:03 +0200, Arnout Vandecappelle wrote:\n\n>  I don't understand how this can happen. The autobuilders should all be running\n> supported (not EOL) distros, right?\n\nAbsolutely not. I'm intentionally running an old Debian in order to\ncatch build issues related to old systems. Running non-supported (i.e\nEOL distros) is very common in enterprise environments, so I want to\nkeep testing this. Just to be clear: I don't personally run EOL\ndistros, and we don't use EOL distros at Free Electrons so it's not\nsomething that I personally care about. But I believe that a lot of\ncompanies do use such old distros on build machines, and therefore it\nmakes sense to keep testing with a fairly old system.\n\nAnd therefore the certificates are often out of date.\n\n>  But I seem to remember that you have a CentOS 5 autobuilder running, and CentOS\n> 5 went EOL on March 31, 2017. So perhaps it's time to switch to CentOS 6?\n\nMe running CentOS ? Crazy you. I'm running a Debian system for the\nautobuilders.\n\n> >> In order to avoid such failures that are not very interesting in the\n> >> context of the autobuilders  \n> \n>  I think they *are* interesting (not very, but still interesting), because\n> actual users *will* hit these problems.\n\nNot really: by the time we make a release, sources.buildroot.net will\nhave fetched the tarball, and therefore our users will simply see\nnothing, except that their download gracefully falls back to\nsources.buildroot.net.\n\nSo those build failures only pollute the autobuild.buildroot.net\nresults in the time window between a package being bumped, and the\ntarball being grabbed by sources.buildroot.net. If you look today at\nautobuild.buildroot.net, there are no more dbus-1.10.24 build failures,\nbecause the \"old\" autobuilder instances download the tarball from\nsources.b.n.\n\n> > We recently bump dbus to 1.10.24, and look how the autobuilders are\n> > \"polluted\" by this certificate issue:\n> > http://autobuild.buildroot.net/?reason=dbus-1.10.24.  \n> \n>  But once Peter updates sources.buildroot.org that should be OK again, no?\n\nYes, but this pollution happens again and again and again every time we\nbump a package that is fetched from https://, with a certificate too\nrecent for those old systems. This creates useless noise in the\nautobuilders. And this noise is useless because we are really not going\nto do anything about this.\n\nBut perhaps it's an issue more unique to my autobuilder instance, and\ntherefore something I should fix locally? Perhaps just an autobuild-run\nfeature that allows to append a custom config option to the config file\nbeing built, so that people can locally add some tweaks?\n\nBest regards,\n\nThomas","headers":{"Return-Path":"<buildroot-bounces@busybox.net>","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.137; helo=fraxinus.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=<UNKNOWN>)","Received":["from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3yBl7k4kYsz9t3k\n\tfor <incoming@patchwork.ozlabs.org>;\n\tWed, 11 Oct 2017 17:53:54 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 3342B862A6;\n\tWed, 11 Oct 2017 06:53:50 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id Gns722flZx36; Wed, 11 Oct 2017 06:53:48 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id ED32D8635C;\n\tWed, 11 Oct 2017 06:53:47 +0000 (UTC)","from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n\tby ash.osuosl.org (Postfix) with ESMTP id 7F6741C0521\n\tfor <buildroot@lists.busybox.net>;\n\tWed, 11 Oct 2017 06:53:45 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id 772588749C\n\tfor <buildroot@lists.busybox.net>;\n\tWed, 11 Oct 2017 06:53:45 +0000 (UTC)","from hemlock.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id PnEF4KjKlClg for <buildroot@lists.busybox.net>;\n\tWed, 11 Oct 2017 06:53:43 +0000 (UTC)","from mail.free-electrons.com (mail.free-electrons.com [62.4.15.54])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id 54FDB87460\n\tfor <buildroot@buildroot.org>; Wed, 11 Oct 2017 06:53:43 +0000 (UTC)","by mail.free-electrons.com (Postfix, from userid 110)\n\tid 17BBF20873; Wed, 11 Oct 2017 08:53:41 +0200 (CEST)","from windsurf.lan\n\t(AAubervilliers-681-1-112-204.w90-88.abo.wanadoo.fr [90.88.51.204])\n\tby mail.free-electrons.com (Postfix) with ESMTPSA id CEBC3207AF;\n\tWed, 11 Oct 2017 08:53:40 +0200 (CEST)"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","Date":"Wed, 11 Oct 2017 08:53:40 +0200","From":"Thomas Petazzoni <thomas.petazzoni@free-electrons.com>","To":"Arnout Vandecappelle <arnout@mind.be>","Message-ID":"<20171011085340.48fe6e73@windsurf.lan>","In-Reply-To":"<f8f82c6a-f51a-8fe6-dc3a-dfc061dd7955@mind.be>","References":"<20170902212938.23712-1-thomas.petazzoni@free-electrons.com>\n\t<20171010222543.0beed48d@windsurf.lan>\n\t<f8f82c6a-f51a-8fe6-dc3a-dfc061dd7955@mind.be>","Organization":"Free Electrons","X-Mailer":"Claws Mail 3.15.1-dirty (GTK+ 2.24.31; x86_64-redhat-linux-gnu)","MIME-Version":"1.0","Cc":"\"Yann\n E. MORIN\" <yann.morin.1998@free.fr>, buildroot@buildroot.org","Subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.busybox.net>","List-Unsubscribe":"<http://lists.busybox.net/mailman/options/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=unsubscribe>","List-Archive":"<http://lists.busybox.net/pipermail/buildroot/>","List-Post":"<mailto:buildroot@busybox.net>","List-Help":"<mailto:buildroot-request@busybox.net?subject=help>","List-Subscribe":"<http://lists.busybox.net/mailman/listinfo/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" <buildroot-bounces@busybox.net>"}},{"id":1886007,"web_url":"http://patchwork.ozlabs.org/comment/1886007/","msgid":"<9825929c-9eaa-3d92-892b-90bf5637dd52@mind.be>","list_archive_url":null,"date":"2018-03-31T15:19:42","subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","submitter":{"id":11809,"url":"http://patchwork.ozlabs.org/api/people/11809/","name":"Arnout Vandecappelle","email":"arnout@mind.be"},"content":"On 11-10-17 08:53, Thomas Petazzoni wrote:\n> Hello,\n> \n> On Tue, 10 Oct 2017 23:25:03 +0200, Arnout Vandecappelle wrote:\n[snip]\n>>> We recently bump dbus to 1.10.24, and look how the autobuilders are\n>>> \"polluted\" by this certificate issue:\n>>> http://autobuild.buildroot.net/?reason=dbus-1.10.24.  \n>>\n>>  But once Peter updates sources.buildroot.org that should be OK again, no?\n> \n> Yes, but this pollution happens again and again and again every time we\n> bump a package that is fetched from https://, with a certificate too\n> recent for those old systems. This creates useless noise in the\n> autobuilders. And this noise is useless because we are really not going\n> to do anything about this.\n\n Even though this problem hasn't occurred again in the last half year AFAIK,\nyour explanation does make sense so I've applied to master, thanks.\n\n Regards,\n Arnout\n\n> But perhaps it's an issue more unique to my autobuilder instance, and\n> therefore something I should fix locally? Perhaps just an autobuild-run\n> feature that allows to append a custom config option to the config file\n> being built, so that people can locally add some tweaks?","headers":{"Return-Path":"<buildroot-bounces@busybox.net>","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming-buildroot@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.137; helo=fraxinus.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=<UNKNOWN>)","ozlabs.org;\n\tdmarc=none (p=none dis=none) header.from=mind.be","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=mind-be.20150623.gappssmtp.com\n\theader.i=@mind-be.20150623.gappssmtp.com header.b=\"pmlYtVW2\"; \n\tdkim-atps=neutral"],"Received":["from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 40D2Gb6dgrz9s15\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n\tSun,  1 Apr 2018 02:19:51 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 202CD89142;\n\tSat, 31 Mar 2018 15:19:50 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id 4JHL9zwxQBnR; Sat, 31 Mar 2018 15:19:49 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 3EA1988A71;\n\tSat, 31 Mar 2018 15:19:49 +0000 (UTC)","from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\tby ash.osuosl.org (Postfix) with ESMTP id D611D1C25DB\n\tfor <buildroot@lists.busybox.net>;\n\tSat, 31 Mar 2018 15:19:48 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby whitealder.osuosl.org (Postfix) with ESMTP id D18E6897BB\n\tfor <buildroot@lists.busybox.net>;\n\tSat, 31 Mar 2018 15:19:48 +0000 (UTC)","from whitealder.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id zvrxbFINtS5c for <buildroot@lists.busybox.net>;\n\tSat, 31 Mar 2018 15:19:47 +0000 (UTC)","from mail-wm0-f54.google.com (mail-wm0-f54.google.com\n\t[74.125.82.54])\n\tby whitealder.osuosl.org (Postfix) with ESMTPS id 25E54897B5\n\tfor <buildroot@buildroot.org>; Sat, 31 Mar 2018 15:19:46 +0000 (UTC)","by mail-wm0-f54.google.com with SMTP id r131so20660426wmb.2\n\tfor <buildroot@buildroot.org>; Sat, 31 Mar 2018 08:19:46 -0700 (PDT)","from [192.168.43.97] ([195.154.228.195])\n\tby smtp.gmail.com with ESMTPSA id\n\t69sm12585386wmn.9.2018.03.31.08.19.44\n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tSat, 31 Mar 2018 08:19:45 -0700 (PDT)"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"from auto-whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=mind-be.20150623.gappssmtp.com; s=20150623;\n\th=subject:to:cc:references:from:organization:message-id:date\n\t:user-agent:mime-version:in-reply-to:content-language\n\t:content-transfer-encoding;\n\tbh=Hock9TshAyfChdRRohPkCcxY0sdkbVFMbLqkXYnhjvI=;\n\tb=pmlYtVW2hdFw1fdhEeh+AiHB6LHTyIfOPThsqmD0xjzVTBc6e17sqewUMirmjMwyVQ\n\t0tu+S7uR0wy+9tpdSASWfeVAJp2FMFiS6xu8JSER6OJC4wMaPlSlQqPBlDEjRpWsKGit\n\tr+78VYtuuQK+6ZoImnyu3TGRBkjnLbeOWZRUdGwm2LaZhT52w63et5uxf7cm5C3ek3RL\n\td6cLbi4sAfPiyXnmjA+B+nQhoCNbn7zgI9zVIrcYM3CAHUsNEVzcoBERZ3YtxlvV/abt\n\t7Vpx5+99GAxM7WTMbWuEMgyogOpfFrPzhF71Am4EjjWk6SgXslbM3GB/Jtsv7Uvhed+S\n\tZmFg==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:subject:to:cc:references:from:organization\n\t:message-id:date:user-agent:mime-version:in-reply-to\n\t:content-language:content-transfer-encoding;\n\tbh=Hock9TshAyfChdRRohPkCcxY0sdkbVFMbLqkXYnhjvI=;\n\tb=mO5A1xjH9FV86xCX9tvW95ZUmtxgfRue/Mpn3f1dDVhRzmrv32UJejwTGJ19e+xDQK\n\tjzZzNAUZ/beyCKAj4ZmhZczliTH+PsmcvEW2OynxsaP/VeDPsImTL/tjf0cDN8JhPvjc\n\tPe9AbIYg/O9fZ+P/4rIOdhc846rHL8IzcYwDeT3axE62ufULZsCBhneIDtxBLPVD+PBi\n\twJ5bmd93mKQFboVYSn0nTHIBrxaTLP4gm1jpVt0056z3mdDpRF/FiBQpC1nLG0+uv3+e\n\tP7yTnYDFrbEggp4cWSYRVFzBAULScl+A5235nUIIXubJ1sdQURvt3wHszwMA8hmigEo/\n\tfoFA==","X-Gm-Message-State":"AElRT7HM0eBp21CD6k5fUZSJ9jGCbFzuOvfz9Ol7IPwFEf0Slkhlh6VC\n\ttelQl8D3XQBINZGiHnluleQiYg==","X-Google-Smtp-Source":"AIpwx4/djHDj3u8pnxIysoCPmAq8nkaPUMyqpT5/+AyGC6Wi2hob+oP8abUqg5BRBD8o+sLNNM0/IQ==","X-Received":"by 10.28.69.133 with SMTP id l5mr4519133wmi.152.1522509585491;\n\tSat, 31 Mar 2018 08:19:45 -0700 (PDT)","To":"Thomas Petazzoni <thomas.petazzoni@free-electrons.com>","References":"<20170902212938.23712-1-thomas.petazzoni@free-electrons.com>\n\t<20171010222543.0beed48d@windsurf.lan>\n\t<f8f82c6a-f51a-8fe6-dc3a-dfc061dd7955@mind.be>\n\t<20171011085340.48fe6e73@windsurf.lan>","From":"Arnout Vandecappelle <arnout@mind.be>","Organization":"Essensium/Mind","Message-ID":"<9825929c-9eaa-3d92-892b-90bf5637dd52@mind.be>","Date":"Sat, 31 Mar 2018 17:19:42 +0200","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101\n\tThunderbird/52.6.0","MIME-Version":"1.0","In-Reply-To":"<20171011085340.48fe6e73@windsurf.lan>","Content-Language":"en-GB","Subject":"Re: [Buildroot] [PATCH] utils/genrandconfig: use\n\t--no-check-certificate in wget by default","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.24","Precedence":"list","List-Id":"Discussion and development of buildroot <buildroot.busybox.net>","List-Unsubscribe":"<http://lists.busybox.net/mailman/options/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=unsubscribe>","List-Archive":"<http://lists.busybox.net/pipermail/buildroot/>","List-Post":"<mailto:buildroot@busybox.net>","List-Help":"<mailto:buildroot-request@busybox.net?subject=help>","List-Subscribe":"<http://lists.busybox.net/mailman/listinfo/buildroot>,\n\t<mailto:buildroot-request@busybox.net?subject=subscribe>","Cc":"\"Yann E. MORIN\" <yann.morin.1998@free.fr>, buildroot@buildroot.org","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" <buildroot-bounces@busybox.net>"}}]