← Back to issue list

Unable to verify self signed certificate

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1875781
Type
issue
State
open
Author
~taitenpeng
Labels
—
Created
Updated
Closed
—

Current evaluation

Tracking bug for an OpenSSL self-signed certificate verification failure (openssl/openssl#1418) that broke HTTPS behind corporate proxies. Upstream fix (openssl/openssl#10587) merged in 2019. No activity for ~3.3 years, no labels or comments.

Suggested action: close stale

Reason: The issue exists only to track the upstream OpenSSL fix (openssl/openssl#10587), which was merged in 2019 and shipped in OpenSSL 1.1.1d, so the tracked work is complete. It has had zero comments, no labels, and no maintainer interaction for ~3.3 years (last activity 1206 days ago), and the affected Ubuntu 18.04-era environment is EOL, so the original problem is no longer reproducible on supported releases.

Impact: 15 Quick Win: 13.5 Staleness: 95 Complexity: 10 Confidence: 85 Support Request: 10

Issue body

See the upstream bug background https://github.com/openssl/openssl/issues/1418 The issue initially was caught in a case when developers works behind company firewall and requires install company self signed certificate on Ubuntu host in order to access internet via company proxy. User may experience unable to access internet services via https protocol when even manually installed root trust ca-certificate on host machine due to openssl unable to verify some type of self signed certificate. This is also causing problems for snapcraft developers who work behind proxy servers unable to build snap packages. There is a fix going into openssl upstream apparently https://github.com/openssl/openssl/pull/10587 Just create a bug here to track this issue in Ubuntu in order to make sure we merge upstream fixes ultimately. Similar case reported by other users: [1] https://serverfault.com/questions/966846/cannot-trust-development-https-self-signed-certificate-in-ubuntu-18-04-2-lts [2] https://stackoverflow.com/questions/55485511/how-to-run-dotnet-dev-certs-https-trust/59702094#59702094

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 15
Quick Win: 13.5
Staleness: 95
Complexity: 10
Confidence: 85
Support Request: 10
close stale Tracking bug for an OpenSSL self-signed certificate verification failure (openssl/openssl#1418) that broke HTTPS behind corporate proxies. Upstream fix (openssl/openssl#10587) merged in 2019. No activity for ~3.3 years, no labels or comments.
qwen/qwen3.6-35b-a3b
Staleness: 98
Complexity: 15
Confidence: 95
Support Request: 10
close stale Tracking ticket for upstream OpenSSL fix regarding self-signed certificate verification failures behind corporate proxies. Inactive for over three years with no maintainer interaction.
qwen/qwen3.6-35b-a3b
Staleness: 95
Complexity: 15
Confidence: 90
Support Request: 10
close stale Tracking issue for an upstream OpenSSL fix regarding self-signed certificate verification behind proxies. No maintainer interaction, labels, or comments in over six years.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 15
Confidence: 85
Support Request: 5
close stale Tracking bug to monitor and backport an upstream OpenSSL fix for self-signed certificate verification failures behind corporate proxies. Currently inactive with no maintainer response or labels.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 20
Confidence: 85
Support Request: 10
close stale Tracking issue for an upstream OpenSSL bug regarding self-signed certificate verification behind proxies. No maintainer interaction, no labels, and inactive for over three years.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/snapcraft#4935 (confidence 60%)

    Same symptom class (HTTPS certificate verification failure behind corporate proxy affecting snapcraft builds) but a different root cause: snapcraft not using the system CA store, with a REQUESTS_CA_BUNDLE workaround; still open.

Related issues

No related issues found above the similarity threshold.