Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(#2227) Bring Ubuntu to 18.04 in Travis #2228

Merged
merged 1 commit into from
Apr 16, 2021
Merged

(#2227) Bring Ubuntu to 18.04 in Travis #2228

merged 1 commit into from
Apr 16, 2021

Conversation

gliptak
Copy link
Contributor

@gliptak gliptak commented Apr 9, 2021

Fixes #2227

@gliptak gliptak changed the title (#2227) Bring Ubuntu to 20.04 in Travis (#2227) Bring Ubuntu to 18.04 in Travis Apr 9, 2021
@gliptak
Copy link
Contributor Author

gliptak commented Apr 14, 2021

@gep13 please review

@gep13
Copy link
Member

gep13 commented Apr 15, 2021

@TheCakeIsNaOH as someone who is more familiar with building the mono compatible version of Chocolatey, would you mind doing a review of this PR?

Thanks!

@TheCakeIsNaOH
Copy link
Member

@gep13 @gliptak

So this fixes the SSL issue by bumping the OS version from 16.04 to 18.04, and pulling the newer root certificates from the OS (ca-certificates), which mono can then use.

My inclination would be instead to bump the mono version, which would then bring in the newer root certificates directly in mono. This would help avoid getting stuck on an old mono version and causing issues like #1020

I tried this with #2234, and travis is working fine with the newer mono version there.

@gep13
Copy link
Member

gep13 commented Apr 15, 2021

@TheCakeIsNaOH this seems like a sensible approach to me. @gliptak what are your thoughts here? If you wanted to update this PR to use this suggestion, we can look to get it merged in.

@gliptak
Copy link
Contributor Author

gliptak commented Apr 15, 2021

I certainly can add Mono bump to 6.12.0 into this PR. I still would recommend bringing Ubuntu more current (and I will remove the cert apt)

Copy link
Member

@TheCakeIsNaOH TheCakeIsNaOH left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine.

When building the chocolatey code base on Travis, there is a failure
when trying to restore nuget packages. This is due to the fact that an
older version of Mono doesn't contain the newer root certificates
necessary to ensure a valid TLS handshake.  Using a newer version of
Mono ensures that these are in place.

In addition, updating to the latest Ubuntu (bionic).
@gep13 gep13 changed the base branch from master to stable April 16, 2021 09:23
@gep13 gep13 merged commit 5f0b6f7 into chocolatey:stable Apr 16, 2021
@gep13
Copy link
Member

gep13 commented Apr 16, 2021

@gliptak thank you very much for taking the time to get this fixed up, appreciate it! And thanks to @TheCakeIsNaOH for the assist!

@gliptak gliptak deleted the travis1 branch April 16, 2021 12:24
TheCakeIsNaOH added a commit to TheCakeIsNaOH/choco that referenced this pull request Apr 17, 2021
Bring Mono version in line with version in CI configuration,
which was updated by chocolatey#2228
gep13 pushed a commit to TheCakeIsNaOH/choco that referenced this pull request Apr 19, 2021
Bring Mono version in line with version in CI configuration,
which was updated by chocolatey#2228
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Travis PR build fails with OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
3 participants