koji client on RHEL7 - ssl can't verify the certificate

[Atanas Zhelev]

Hi all,

I have an issue running the koji client on RHEL7. I've installed the
package from EPEL:

http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/repoview/koji.html

Trying to run a build though produces error message:

$ koji build TAGHERE 'SCM URL here'
Error: [('asn1 encoding routines', 'ASN1_item_verify', 'unknown
message
digest algorithm'), ('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE',
'certificate verify failed')]

I've tried with the same certificate on different machine and i don't
have such issue there. Anyone have some advice what the problem might
be with RHEL7?

Thanks
Atanas

[Peter Bojtos]

Hi, 

On RHEL7 OpenSSL dropped MD5 support (I had the same problem). The certs have to be
regenerated with SHA256 to use koji on RHEL7. 

Hope it helped, 
ptr 

----- Eredeti üzenet -----

>  Feladó: "Atanas Zhelev" <atanas.zhelev(a)opencode.com&gt;
>  Címzett: buildsys(a)lists.fedoraproject.org
>  Elküldött üzenetek: Szerda, 2014. Augusztus 27. 16:22:43
>  Tárgy: koji client on RHEL7 - ssl can't verify the certificate 
>  Hi all, 
>  I have an issue running the koji client on RHEL7. I've installed
> the
>  package from EPEL: 
>  http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/repoview/koji.html
>  Trying to run a build though produces error message: 
>  $ koji build TAGHERE 'SCM URL here'
>  Error: [('asn1 encoding routines', 'ASN1_item_verify', 'unknown
> message
>  digest algorithm'), ('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE',
>  'certificate verify failed')] 
>  I've tried with the same certificate on different machine and i
> don't
>  have such issue there. Anyone have some advice what the problem might
>  be with RHEL7? 
>  Thanks
>  Atanas
>  --
>  buildsys mailing list
>  buildsys(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/buildsys