From: https://fedoraproject.org/wiki/ReleaseEngineering/FlagDay2016 
    
Question: I get an error "SSL: CERTIFICATE_VERIFY_FAILED" when trying
to use koji 

Answer: This means you have an outdated configuration file. Please make
sure first that you have the package versions as described in the list
above. If you do have those versions, please check if you have a
/etc/koji.conf.rpmnew, in which case you need to move that to
/etc/koji.conf. If you don't, check if you have a ~/.koji/config file,
in which case you want to remove that. 


is this problem ? 

On Dom, 2017-04-23 at 13:29 +0000, Globe Trotter wrote:
>
>
> From: Peter Robinson <pbrobinson@gmail.com>
> To: Development discussions related to Fedora <devel@lists.fedoraproj
> ect.org> 
> Cc: Globe Trotter <itsme_410@yahoo.com>
> Sent: Sunday, April 23, 2017 6:31 AM
> Subject: Re: Question on koji error: SSLError: [SSL:
> CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)
>
> On Sun, Apr 23, 2017 at 11:28 AM, Kai Engert <kaie@kuix.de> wrote:
> > On Sun, 2017-04-23 at 01:05 +0000, Globe Trotter wrote:
> >> Hi,
> >> I am trying to build a package on koji using:
> >> koji  build --scratch f25  thaali-0.4.2-1.fc25.src.rpm
> >>
> >> and I get:
> >> SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
> failed
> >> (_ssl.c:661)
> >>
> >> What does this mean? I have both kerberos ticketing and ssh set
> up.
> >> Valid starting      Expires              Service principal
> >> 04/22/2017 20:00:42  04/23/2017 20:00:16  host/koji.fedoraproject.
> org@FEDORAPR
> >> OJECT.ORG
> >>    renew until 04/29/2017 20:00:16
> >> 04/22/2017 20:00:38  04/23/2017 20:00:16  krbtgt/FEDORAPROJECT.ORG
> @FEDORAPROJE
> >> CT.ORG
> >>    renew until 04/29/2017 20:00:16
> >
> > I don't get an error when I try to submit a scratch build.
>
> Have you got an old .fedora.cert cert file that's recently expired,
> you should be able to just remove it.
>
>
> I removed both .fedora.cert and .fedora-upload-ca.cert, one by one,
> to no avail. I also have a .fedora-server-ca.cert which I then
> removed. But now, the command hangs. 
>
> I went and regenerated fedora-packager-setup 
>
> and now I am back to the same problem.
>
> Btw, 
>
> $ openssl s_client -showcerts -connect koji.fedoraproject.org:443
>
> gives no errors but
>
> $ /usr/lib64/nss/unsupported-tools/tstclnt -CCC -D -b -h
> koji.fedoraproject.org -p 443
> tstclnt: error setting SSL/TLS version range :
> SSL_ERROR_INVALID_VERSION_RANGE: SSL version range is not valid.
>
> but does.
>
> Thanks!
> aarem
>
> _______________________________________________
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-leave@lists.fedoraproject.org
--
Sérgio M. B.
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-leave@lists.fedoraproject.org