dl.hhvm.com repo is unavailable due to SSL issuer about hhvm

[fredemmott]

I no longer work for Meta, or on Hack/HHVM.

[Wilfred]

Looks like we didn't have the intermediate certificate on AWS us-east-1, which hosts dl.hhvm.com. I believe this is now sorted, but I'll leave open for a few days in case we've missed anything.

[vikash-itspe]

@fredemmott Please check this

This is still not fixed

The repository 'https://dl.hhvm.com/ubuntu focal-4.107 Release' does not have a Release file.
Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 108.159.80.79 443]

[erik-bershel]

@vikash-itspe tmp workaround if needed: actions/runner-images#7817

[vikash-itspe]

still there is no official solution to this from HHVM side. Worrying situation :(

[vikash-itspe]

Is anyone from hhvm fixing this ?

#0 0.296 Err:2 https://dl.hhvm.com/ubuntu focal-4.107 Release
#0 0.296 Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 108.159.80.42 443]
#0 6.313 Reading package lists...
#0 7.459 E: The repository 'https://dl.hhvm.com/ubuntu focal-4.107 Release' does not have a Release file.

[vikash-itspe]

@diliop can you look into this major outage issue.

[diliop]

@vikash-itspe I'll try to find someone that can take a look, I don't work on HHVM. In the meantime does the workaround posted by @erik-bershel work for you?

[paulbiss]

There was an issue with our SSL certificate a couple weeks ago but it's since been updated. When I load https://dl.hhvm.com/ I'm seeing a valid certificate now.

[erik-bershel]

Hey @paulbiss!
Try it please on Ubuntu with the instructions from the HHVM web-site. It wouldn't work. Works fine with the browsers but not with APT.

[Wilfred]

The certificate expired on the 23rd of June, so I installed the new certificate later that day. Browsers are totally happy but for some reason apt doesn't like the certificate.

https://www.ssllabs.com/ssltest/analyze.html?d=dl.hhvm.com&s=13.35.121.80&hideResults=on says that the chain is incomplete, so maybe apt is fussy about this?

[vikash-itspe]

@Wilfred Thanks Finally apt installed is working perfectly now .
👍🏻