Question: I get an error "SSL: CERTIFICATE_VERIFY_FAILED" when trying
to use koji
Answer: This means you have an outdated configuration file. Please make
sure first that you have the package versions as described in the list
above. If you do have those versions, please check if you have a
/etc/koji.conf.rpmnew, in which case you need to move that to
/etc/koji.conf. If you don't, check if you have a ~/.koji/config file,
in which case you want to remove that.
is this problem ?
On Dom, 2017-04-23 at 13:29 +0000, Globe Trotter wrote:
From: Peter Robinson <pbrobinson(a)gmail.com>
To: Development discussions related to Fedora <devel(a)lists.fedoraproj
ect.org>
Cc: Globe Trotter <itsme_410(a)yahoo.com>
Sent: Sunday, April 23, 2017 6:31 AM
Subject: Re: Question on koji error: SSLError: [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)
On Sun, Apr 23, 2017 at 11:28 AM, Kai Engert <kaie(a)kuix.de> wrote:
> On Sun, 2017-04-23 at 01:05 +0000, Globe Trotter wrote:
>> Hi,
>> I am trying to build a package on koji using:
>> koji build --scratch f25 thaali-0.4.2-1.fc25.src.rpm
>>
>> and I get:
>> SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
failed
>> (_ssl.c:661)
>>
>> What does this mean? I have both kerberos ticketing and ssh set
up.
>> Valid starting Expires Service principal
>> 04/22/2017 20:00:42 04/23/2017 20:00:16 host/koji.fedoraproject.
org@FEDORAPR
>>
OJECT.ORG
>> renew until 04/29/2017 20:00:16
>> 04/22/2017 20:00:38 04/23/2017 20:00:16
krbtgt/FEDORAPROJECT.ORG
@FEDORAPROJE
>>
CT.ORG
>> renew until 04/29/2017 20:00:16
>
> I don't get an error when I try to submit a scratch build.
Have you got an old .fedora.cert cert file that's recently expired,
you should be able to just remove it.
I removed both .fedora.cert and .fedora-upload-ca.cert, one by one,
to no avail. I also have a .fedora-server-ca.cert which I then
removed. But now, the command hangs.
I went and regenerated fedora-packager-setup
and now I am back to the same problem.
Btw,
$ openssl s_client -showcerts -connect koji.fedoraproject.org:443
gives no errors but
$ /usr/lib64/nss/unsupported-tools/tstclnt -CCC -D -b -h
koji.fedoraproject.org -p 443
tstclnt: error setting SSL/TLS version range :
SSL_ERROR_INVALID_VERSION_RANGE: SSL version range is not valid.
but does.
Thanks!
aarem
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
--
Sérgio M. B.