Re: FreeType CI build fails on Windows

[Azamat Hackimov]

Hi again.

As I suspected, Windows image lacks the recent Root CA from Let's
Encrypt (famous ISRG Root X1 / IdenTrust DST Root CA X3 issue).
Normally Windows should automagically update Root CAs during invoking
the Schanel crypto library, but Python uses OpenSSL, so magic does not
happen.
Here my solution to fetch all valid CAs and install them to trusted
datastore: https://gitlab.freedesktop.org/freetype/freetype/-/merge_requests/129

вт, 11 янв. 2022 г. в 09:42, Azamat Hackimov <azamat.hackimov@gmail.com>:
>
> Hi.
>
> (sorry for direct sending previous message)
>
> Seems Windows image that you use in CI lacks some of Root CA. Try to
> update image 
> 'registry.freedesktop.org/gstreamer/gst-ci/amd64/windows:v14-master'
> to 
> 'registry.freedesktop.org/gstreamer/gst-ci/amd64/windows:v14-master:2021-09-09.0-master'
> in .gitlab-ci.yml
> (https://gitlab.freedesktop.org/freetype/freetype/-/blob/master/.gitlab-ci.yml#L12)
>
> Main issue is here - https://bugs.python.org/issue36011. GST devs
> reported that this issue fixed here
> https://gitlab.freedesktop.org/gstreamer/gst-ci/-/commit/d94c24b39004ee5b25d910b967a46681d7365d0f.
>
> вт, 11 янв. 2022 г. в 08:03, Werner LEMBERG <wl@gnu.org>:
> >
> >
> > I frequently (but not always) get the following error in Windows
> > builds of FreeType, as shown in
> >
> >   https://gitlab.freedesktop.org/freetype/freetype/-/jobs/17462980
> >
> > The problematic part is the following:
> >
> > ```
> > Downloading zlib patch from
> >   https://wrapdb.mesonbuild.com/v2/zlib_1.2.11-5/get_patch
> > A fallback URL could be specified using patch_fallback_url key in the wrap 
> > file
> > WrapDB connection failed to
> >   https://wrapdb.mesonbuild.com/v2/zlib_1.2.11-5/get_patch
> > with error
> >   <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
> >    failed: certificate has expired (_ssl.c:1122)>
> > ```
> >
> > I've already asked the meson people
> >
> >   https://github.com/mesonbuild/meson/issues/9805
> >
> > and it seems to be a problem with freedesktop.org.  Any idea what's
> > going on and how to fix it?
> >
> >
> >      Werner
> >
>
>
> --
> From Siberia with Love!



-- 
>From Siberia with Love!