fedpkg koji error

[Farkas Levente]

hi,
while try to make a scratch build i always got:
-----------------------------------------
# fedpkg scratch-build
Could not log into koji: Opening a SSL connection failed
-----------------------------------------
even if i try to remove .fedora.cert and fedora-packager-setup (so it's
not a certificate problem).
what else can be the reason?
thanks in advance.
regards.

-- 
  Levente                               "Si vis pacem para bellum!"

[Pavel Alexeev]

 Try verbose variant to figure out what happened:

$ fedpkg -v scratch-build


06.10.2010 13:19, Farkas Levente wrote:
>  hi,
>  while try to make a scratch build i always got:
>  -----------------------------------------
>  # fedpkg scratch-build
>  Could not log into koji: Opening a SSL connection failed
>  -----------------------------------------
>  even if i try to remove .fedora.cert and fedora-packager-setup (so it's
>  not a certificate problem).
>  what else can be the reason?
>  thanks in advance.
>  regards.
>

[Thomas Spura]

On Wed, 06 Oct 2010 11:19:21 +0200
Farkas Levente wrote:

>  hi,
>  while try to make a scratch build i always got:
>  -----------------------------------------
>  # fedpkg scratch-build
>  Could not log into koji: Opening a SSL connection failed
>  -----------------------------------------
>  even if i try to remove .fedora.cert and fedora-packager-setup (so
>  it's not a certificate problem).
>  what else can be the reason?
>  thanks in advance.
>  regards. 
This is because the ssl_login to koji failed, so your SSL key is
expired. Generate a new one and upload it to fas:
https://admin.fedoraproject.org/accounts/

After waiting an hour or something, it should work again (I hope).

	Thomas

[Dennis Gilmore]

On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
>  On Wed, 06 Oct 2010 11:19:21 +0200
>  
>  Farkas Levente wrote:
>  > hi,
>  > while try to make a scratch build i always got:
>  > -----------------------------------------
>  > # fedpkg scratch-build
>  > Could not log into koji: Opening a SSL connection failed
>  > -----------------------------------------
>  > even if i try to remove .fedora.cert and fedora-packager-setup (so
>  > it's not a certificate problem).
>  > what else can be the reason?
>  > thanks in advance.
>  > regards.
>  
>  This is because the ssl_login to koji failed, so your SSL key is
>  expired. Generate a new one and upload it to fas:
>  https://admin.fedoraproject.org/accounts/
>  
>  After waiting an hour or something, it should work again (I hope).
>  
>  	Thomas 
"fedora-cert -v"  will verify if the cert is valid or not.

when you need a new cert the recommended way to get it it to use fedora-
packager-setup or fedora-cert.  

you dont upload a ssl cert to fas. and there is no waiting for it to be valid.

Dennis

[Farkas Levente]

On 10/08/2010 03:53 PM, Dennis Gilmore wrote:
>  On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
> > On Wed, 06 Oct 2010 11:19:21 +0200
> >
> > Farkas Levente wrote:
> >> hi,
> >> while try to make a scratch build i always got:
> >> -----------------------------------------
> >> # fedpkg scratch-build
> >> Could not log into koji: Opening a SSL connection failed
> >> -----------------------------------------
> >> even if i try to remove .fedora.cert and fedora-packager-setup (so
> >> it's not a certificate problem).
> >> what else can be the reason?
> >> thanks in advance.
> >> regards.
> >
> > This is because the ssl_login to koji failed, so your SSL key is
> > expired. Generate a new one and upload it to fas:
> > https://admin.fedoraproject.org/accounts/
> >
> > After waiting an hour or something, it should work again (I hope).
> >
> > 	Thomas
>  
>  "fedora-cert -v"  will verify if the cert is valid or not.
>  
>  when you need a new cert the recommended way to get it it to use fedora-
>  packager-setup or fedora-cert.  
>  
>  you dont upload a ssl cert to fas. and there is no waiting for it to be valid. 
---------------------------
[lfarkas@fox jna (f12)]$ fedora-cert -v
Verifying Certificate
cert expires: 2011-04-06
CRL Checking not implemented yet
[lfarkas@fox jna (f12)]$ fedpkg build
Could not log into koji: Opening a SSL connection failed
---------------------------
so what's now?

-- 
  Levente                               "Si vis pacem para bellum!"

[Dennis Gilmore]

On Friday, October 08, 2010 09:15:08 am Farkas Levente wrote:
>  On 10/08/2010 03:53 PM, Dennis Gilmore wrote:
>  > On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
>  >> On Wed, 06 Oct 2010 11:19:21 +0200
>  >> 
>  >> Farkas Levente wrote:
>  >>> hi,
>  >>> while try to make a scratch build i always got:
>  >>> -----------------------------------------
>  >>> # fedpkg scratch-build
>  >>> Could not log into koji: Opening a SSL connection failed
>  >>> -----------------------------------------
>  >>> even if i try to remove .fedora.cert and fedora-packager-setup (so
>  >>> it's not a certificate problem).
>  >>> what else can be the reason?
>  >>> thanks in advance.
>  >>> regards.
>  >> 
>  >> This is because the ssl_login to koji failed, so your SSL key is
>  >> expired. Generate a new one and upload it to fas:
>  >> https://admin.fedoraproject.org/accounts/
>  >> 
>  >> After waiting an hour or something, it should work again (I hope).
>  >> 
>  >> 	Thomas
>  > 
>  > "fedora-cert -v"  will verify if the cert is valid or not.
>  > 
>  > when you need a new cert the recommended way to get it it to use fedora-
>  > packager-setup or fedora-cert.
>  > 
>  > you dont upload a ssl cert to fas. and there is no waiting for it to be
>  > valid.
>  
>  ---------------------------
>  [lfarkas@fox jna (f12)]$ fedora-cert -v
>  Verifying Certificate
>  cert expires: 2011-04-06
>  CRL Checking not implemented yet
>  [lfarkas@fox jna (f12)]$ fedpkg build
>  Could not log into koji: Opening a SSL connection failed
>  ---------------------------
>  so what's now? 
fedpkg -v build

[Farkas Levente]

On 10/08/2010 04:28 PM, Dennis Gilmore wrote:
>  On Friday, October 08, 2010 09:15:08 am Farkas Levente wrote:
> > On 10/08/2010 03:53 PM, Dennis Gilmore wrote:
> >> On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
> >>> On Wed, 06 Oct 2010 11:19:21 +0200
> >>>
> >>> Farkas Levente wrote:
> >>>> hi,
> >>>> while try to make a scratch build i always got:
> >>>> -----------------------------------------
> >>>> # fedpkg scratch-build
> >>>> Could not log into koji: Opening a SSL connection failed
> >>>> -----------------------------------------
> >>>> even if i try to remove .fedora.cert and fedora-packager-setup (so
> >>>> it's not a certificate problem).
> >>>> what else can be the reason?
> >>>> thanks in advance.
> >>>> regards.
> >>>
> >>> This is because the ssl_login to koji failed, so your SSL key is
> >>> expired. Generate a new one and upload it to fas:
> >>> https://admin.fedoraproject.org/accounts/
> >>>
> >>> After waiting an hour or something, it should work again (I hope).
> >>>
> >>> 	Thomas
> >>
> >> "fedora-cert -v"  will verify if the cert is valid or not.
> >>
> >> when you need a new cert the recommended way to get it it to use fedora-
> >> packager-setup or fedora-cert.
> >>
> >> you dont upload a ssl cert to fas. and there is no waiting for it to be
> >> valid.
> >
> > ---------------------------
> > [lfarkas@fox jna (f12)]$ fedora-cert -v
> > Verifying Certificate
> > cert expires: 2011-04-06
> > CRL Checking not implemented yet
> > [lfarkas@fox jna (f12)]$ fedpkg build
> > Could not log into koji: Opening a SSL connection failed
> > ---------------------------
> > so what's now?
>  
>  fedpkg -v build 
[lfarkas@eagle jna (f12)]$ fedora-cert -v
Verifying Certificate
cert expires: 2011-04-06
CRL Checking not implemented yet
[lfarkas@eagle jna (f12)]$ fedpkg -v build
Creating module object from /home/lfarkas/work/lenux/fedora/jna
Initiating a koji session to http://koji.fedoraproject.org/kojihub
Could not log into koji: Opening a SSL connection failed


-- 
  Levente                               "Si vis pacem para bellum!"

[Jesse Keating]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/8/10 9:57 AM, Farkas Levente wrote:
>  On 10/08/2010 04:28 PM, Dennis Gilmore wrote:
> > On Friday, October 08, 2010 09:15:08 am Farkas Levente wrote:
> >> On 10/08/2010 03:53 PM, Dennis Gilmore wrote:
> >>> On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
> >>>> On Wed, 06 Oct 2010 11:19:21 +0200
> >>>>
> >>>> Farkas Levente wrote:
> >>>>> hi,
> >>>>> while try to make a scratch build i always got:
> >>>>> -----------------------------------------
> >>>>> # fedpkg scratch-build
> >>>>> Could not log into koji: Opening a SSL connection failed
> >>>>> -----------------------------------------
> >>>>> even if i try to remove .fedora.cert and fedora-packager-setup (so
> >>>>> it's not a certificate problem).
> >>>>> what else can be the reason?
> >>>>> thanks in advance.
> >>>>> regards.
> >>>>
> >>>> This is because the ssl_login to koji failed, so your SSL key is
> >>>> expired. Generate a new one and upload it to fas:
> >>>> https://admin.fedoraproject.org/accounts/
> >>>>
> >>>> After waiting an hour or something, it should work again (I hope).
> >>>>
> >>>> 	Thomas
> >>>
> >>> "fedora-cert -v"  will verify if the cert is valid or not.
> >>>
> >>> when you need a new cert the recommended way to get it it to use fedora-
> >>> packager-setup or fedora-cert.
> >>>
> >>> you dont upload a ssl cert to fas. and there is no waiting for it to be
> >>> valid.
> >>
> >> ---------------------------
> >> [lfarkas@fox jna (f12)]$ fedora-cert -v
> >> Verifying Certificate
> >> cert expires: 2011-04-06
> >> CRL Checking not implemented yet
> >> [lfarkas@fox jna (f12)]$ fedpkg build
> >> Could not log into koji: Opening a SSL connection failed
> >> ---------------------------
> >> so what's now?
> >
> > fedpkg -v build
>  
>  [lfarkas@eagle jna (f12)]$ fedora-cert -v
>  Verifying Certificate
>  cert expires: 2011-04-06
>  CRL Checking not implemented yet
>  [lfarkas@eagle jna (f12)]$ fedpkg -v build
>  Creating module object from /home/lfarkas/work/lenux/fedora/jna
>  Initiating a koji session to http://koji.fedoraproject.org/kojihub
>  Could not log into koji: Opening a SSL connection failed
>  
>   
What version of nss do you have installed?  There was a nss build that
could not handle the certs offered by FAS.

- -- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating


> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyvUq8ACgkQ4v2HLvE71NVnfACfYKS3/swSu0RMh9kjpjLNpDm8
> XFUAn3uCFFKj1y7khE++ZG1a+flQ1tMW
> =+M7o
> -----END PGP SIGNATURE-----

[Farkas Levente]

On 10/08/2010 07:19 PM, Jesse Keating wrote:
>  On 10/8/10 9:57 AM, Farkas Levente wrote:
> > On 10/08/2010 04:28 PM, Dennis Gilmore wrote:
> >> On Friday, October 08, 2010 09:15:08 am Farkas Levente wrote:
> >>> On 10/08/2010 03:53 PM, Dennis Gilmore wrote:
> >>>> On Thursday, October 07, 2010 04:25:45 am Thomas Spura wrote:
> >>>>> On Wed, 06 Oct 2010 11:19:21 +0200
> >>>>>
> >>>>> Farkas Levente wrote:
> >>>>>> hi,
> >>>>>> while try to make a scratch build i always got:
> >>>>>> -----------------------------------------
> >>>>>> # fedpkg scratch-build
> >>>>>> Could not log into koji: Opening a SSL connection failed
> >>>>>> -----------------------------------------
> >>>>>> even if i try to remove .fedora.cert and fedora-packager-setup
> (so
> >>>>>> it's not a certificate problem).
> >>>>>> what else can be the reason?
> >>>>>> thanks in advance.
> >>>>>> regards.
> >>>>>
> >>>>> This is because the ssl_login to koji failed, so your SSL key is
> >>>>> expired. Generate a new one and upload it to fas:
> >>>>> https://admin.fedoraproject.org/accounts/
> >>>>>
> >>>>> After waiting an hour or something, it should work again (I hope).
> >>>>>
> >>>>> 	Thomas
> >>>>
> >>>> "fedora-cert -v"  will verify if the cert is valid or not.
> >>>>
> >>>> when you need a new cert the recommended way to get it it to use fedora-
> >>>> packager-setup or fedora-cert.
> >>>>
> >>>> you dont upload a ssl cert to fas. and there is no waiting for it to be
> >>>> valid.
> >>>
> >>> ---------------------------
> >>> [lfarkas@fox jna (f12)]$ fedora-cert -v
> >>> Verifying Certificate
> >>> cert expires: 2011-04-06
> >>> CRL Checking not implemented yet
> >>> [lfarkas@fox jna (f12)]$ fedpkg build
> >>> Could not log into koji: Opening a SSL connection failed
> >>> ---------------------------
> >>> so what's now?
> >>
> >> fedpkg -v build
>  
> > [lfarkas@eagle jna (f12)]$ fedora-cert -v
> > Verifying Certificate
> > cert expires: 2011-04-06
> > CRL Checking not implemented yet
> > [lfarkas@eagle jna (f12)]$ fedpkg -v build
> > Creating module object from /home/lfarkas/work/lenux/fedora/jna
> > Initiating a koji session to http://koji.fedoraproject.org/kojihub
> > Could not log into koji: Opening a SSL connection failed
>  
>  
>  
>  What version of nss do you have installed?  There was a nss build that
>  could not handle the certs offered by FAS. 
rhel-6 beta2's
nss-3.12.6-3.el6.x86_64
anyway yesterday morning i was not able to build, but afternoot after a
new cert ie: fedora-packager-setup i was able to build again. then today
i can't build again...

-- 
  Levente                               "Si vis pacem para bellum!"

[Jesse Keating]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/8/10 10:52 AM, Farkas Levente wrote:
>  rhel-6 beta2's
>  nss-3.12.6-3.el6.x86_64
>  anyway yesterday morning i was not able to build, but afternoot after a
>  new cert ie: fedora-packager-setup i was able to build again. then today
>  i can't build again...
>   
Are you generating the cert on multiple hosts?  You can only ever have
one cert, you have to copy it manually to all the hosts that you work from.

Also, I seem to recall RHEL6's nss having issues with our cert, somebody
more familiar with the problem will have to verify though.

- -- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating


> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyvW6MACgkQ4v2HLvE71NXa3ACfVIQbS63JWqgAh2zhspHDzNNT
> QBAAniO3uORk4uwwLVGgrtzOLDIWXXRF
> =lvVW
> -----END PGP SIGNATURE-----

[Farkas Levente]

On 10/08/2010 07:57 PM, Jesse Keating wrote:
>  On 10/8/10 10:52 AM, Farkas Levente wrote:
> > rhel-6 beta2's
> > nss-3.12.6-3.el6.x86_64
> > anyway yesterday morning i was not able to build, but afternoot after a
> > new cert ie: fedora-packager-setup i was able to build again. then today
> > i can't build again...
>  
>  
>  Are you generating the cert on multiple hosts?  You can only ever have
>  one cert, you have to copy it manually to all the hosts that you work from.
>  
>  Also, I seem to recall RHEL6's nss having issues with our cert, somebody
>  more familiar with the problem will have to verify though. 
i synchronize my home and all of my system use rhel-6 beta2 and
yesterday i was able to build today i'm not again (and there was not any
kind of package in the last few weeks:-).

-- 
  Levente                               "Si vis pacem para bellum!"

[Jesse Keating]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/8/10 11:09 AM, Farkas Levente wrote:
>  On 10/08/2010 07:57 PM, Jesse Keating wrote:
> > On 10/8/10 10:52 AM, Farkas Levente wrote:
> >> rhel-6 beta2's
> >> nss-3.12.6-3.el6.x86_64
> >> anyway yesterday morning i was not able to build, but afternoot after a
> >> new cert ie: fedora-packager-setup i was able to build again. then today
> >> i can't build again...
> >
> >
> > Are you generating the cert on multiple hosts?  You can only ever have
> > one cert, you have to copy it manually to all the hosts that you work from.
> >
> > Also, I seem to recall RHEL6's nss having issues with our cert, somebody
> > more familiar with the problem will have to verify though.
>  
>  i synchronize my home and all of my system use rhel-6 beta2 and
>  yesterday i was able to build today i'm not again (and there was not any
>  kind of package in the last few weeks:-).
>   
Can you please try on a Fedora release?

- -- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating


> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAkyvXwUACgkQ4v2HLvE71NVypgCgtexDBoV6eXV4jKvRCqw4hYJz
> CVkAnjOWI020y4rY/HDw+MF5X3WW8fPp
> =loxA
> -----END PGP SIGNATURE-----

[Toshio Kuratomi]

On Fri, Oct 08, 2010 at 08:09:32PM +0200, Farkas Levente wrote:
>  On 10/08/2010 07:57 PM, Jesse Keating wrote:
>  > On 10/8/10 10:52 AM, Farkas Levente wrote:
>  >> rhel-6 beta2's
>  >> nss-3.12.6-3.el6.x86_64
>  >> anyway yesterday morning i was not able to build, but afternoot after a
>  >> new cert ie: fedora-packager-setup i was able to build again. then today
>  >> i can't build again...
>  > 
>  > 
>  > Are you generating the cert on multiple hosts?  You can only ever have
>  > one cert, you have to copy it manually to all the hosts that you work from.
>  > 
>  > Also, I seem to recall RHEL6's nss having issues with our cert, somebody
>  > more familiar with the problem will have to verify though.
>  
>  i synchronize my home and all of my system use rhel-6 beta2 and
>  yesterday i was able to build today i'm not again (and there was not any
>  kind of package in the last few weeks:-).
>   
Okay, here's something to try:

python
> >> import fedora_cert
> >> c = fedora_cert._open_cert()
> >> hex(c.get_serial_number()) 
Looking at our CA, your certificate's serial number should currently be:
  3ECB

-Toshio

[Farkas Levente]

On 10/08/2010 08:49 PM, Toshio Kuratomi wrote:
>  On Fri, Oct 08, 2010 at 08:09:32PM +0200, Farkas Levente wrote:
> > On 10/08/2010 07:57 PM, Jesse Keating wrote:
> >> On 10/8/10 10:52 AM, Farkas Levente wrote:
> >>> rhel-6 beta2's
> >>> nss-3.12.6-3.el6.x86_64
> >>> anyway yesterday morning i was not able to build, but afternoot after a
> >>> new cert ie: fedora-packager-setup i was able to build again. then today
> >>> i can't build again...
> >>
> >>
> >> Are you generating the cert on multiple hosts?  You can only ever have
> >> one cert, you have to copy it manually to all the hosts that you work from.
> >>
> >> Also, I seem to recall RHEL6's nss having issues with our cert, somebody
> >> more familiar with the problem will have to verify though.
> >
> > i synchronize my home and all of my system use rhel-6 beta2 and
> > yesterday i was able to build today i'm not again (and there was not any
> > kind of package in the last few weeks:-).
> >
>  Okay, here's something to try:
>  
>  python
> > >> import fedora_cert
> > >> c = fedora_cert._open_cert()
> > >> hex(c.get_serial_number()) 
>  
>  Looking at our CA, your certificate's serial number should currently be:
>    3ECB 
Python 2.6.2 (r262:71600, Jun 22 2010, 15:25:05)
[GCC 4.4.4 20100611 (Red Hat 4.4.4-8)] on linux2
Type "help", "copyright", "credits" or "license"
for more information.
> >> import fedora_cert
> >> c = fedora_cert._open_cert()
> >> hex(c.get_serial_number()) 
'0x3ecbL'


-- 
  Levente                               "Si vis pacem para bellum!"

[Dennis Gilmore]

On Friday, October 08, 2010 01:09:32 pm Farkas Levente wrote:
>  On 10/08/2010 07:57 PM, Jesse Keating wrote:
>  > On 10/8/10 10:52 AM, Farkas Levente wrote:
>  >> rhel-6 beta2's
>  >> nss-3.12.6-3.el6.x86_64
>  >> anyway yesterday morning i was not able to build, but afternoot after a
>  >> new cert ie: fedora-packager-setup i was able to build again. then today
>  >> i can't build again...
>  > 
>  > Are you generating the cert on multiple hosts?  You can only ever have
>  > one cert, you have to copy it manually to all the hosts that you work
>  > from.
>  > 
>  > Also, I seem to recall RHEL6's nss having issues with our cert, somebody
>  > more familiar with the problem will have to verify though.
>  
>  i synchronize my home and all of my system use rhel-6 beta2 and
>  yesterday i was able to build today i'm not again (and there was not any
>  kind of package in the last few weeks:-). 
Rhel6's curl doesnt support fas
certs.
 but openssl does since it makes them. 

does
koji list-tasks --mine

work?

Dennis

[Farkas Levente]

On 10/08/2010 08:51 PM, Dennis Gilmore wrote:
>  On Friday, October 08, 2010 01:09:32 pm Farkas Levente wrote:
> > On 10/08/2010 07:57 PM, Jesse Keating wrote:
> >> On 10/8/10 10:52 AM, Farkas Levente wrote:
> >>> rhel-6 beta2's
> >>> nss-3.12.6-3.el6.x86_64
> >>> anyway yesterday morning i was not able to build, but afternoot after a
> >>> new cert ie: fedora-packager-setup i was able to build again. then today
> >>> i can't build again...
> >>
> >> Are you generating the cert on multiple hosts?  You can only ever have
> >> one cert, you have to copy it manually to all the hosts that you work
> >> from.
> >>
> >> Also, I seem to recall RHEL6's nss having issues with our cert, somebody
> >> more familiar with the problem will have to verify though.
> >
> > i synchronize my home and all of my system use rhel-6 beta2 and
> > yesterday i was able to build today i'm not again (and there was not any
> > kind of package in the last few weeks:-).
>  Rhel6's curl doesnt support fas certs.
>   but openssl does since it makes them. 
>  
>  does
>  koji list-tasks --mine
>  
>  work? 
ok. sorry it was my fault:-( one of my machine use koji-1.4.0-4 which is
no longer works on rhel-6, just only on fedora. after i downgrade to
koji-1.4.0-2 it's start to work again...
anyway it'd be useful to keep koji and fedpkg versions consistent on all
release (both fedora and rhel) to avoid such problems...

-- 
  Levente                               "Si vis pacem para bellum!"

[Toshio Kuratomi]

On Fri, Oct 08, 2010 at 10:57:58AM -0700, Jesse Keating wrote:
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>  
>  On 10/8/10 10:52 AM, Farkas Levente wrote:
>  > rhel-6 beta2's
>  > nss-3.12.6-3.el6.x86_64
>  > anyway yesterday morning i was not able to build, but afternoot after a
>  > new cert ie: fedora-packager-setup i was able to build again. then today
>  > i can't build again...
>  > 
>  
>  Are you generating the cert on multiple hosts?  You can only ever have
>  one cert, you have to copy it manually to all the hosts that you work from.
>   
This would seem to fit the symptoms of being able to build yesterday but not
today -- the crl that invalidates an old key when a new one is created would
take time to be generated and then propogated to the servers so creating
multiple new certs would have all of them working for a period of time.

>  Also, I seem to recall RHEL6's nss having issues with our cert,
> somebody
>  more familiar with the problem will have to verify though.
>   
Dennis informed me this morning that the koji stuff uses pyOpenSSL so it
shouldn't be affected by nss.  Uploading to the lookaside cache uses curl
which uses nss in RHEL6 and all current Fedoras.

One way to test whether the nss or openssl library is at fault would be to
see if you can upload to lookaside even though building doesn't work or
vice-versa.  If neither one works, it's more likely that there's something
wrong with the certificate itself.

-Toshio

[Dennis Gilmore]

On Friday, October 08, 2010 12:19:46 pm Jesse Keating wrote:
>  On 10/8/10 9:57 AM, Farkas Levente wrote:
>  > 
>  > [lfarkas@eagle jna (f12)]$ fedora-cert -v
>  > Verifying Certificate
>  > cert expires: 2011-04-06
>  > CRL Checking not implemented yet
>  > [lfarkas@eagle jna (f12)]$ fedpkg -v build
>  > Creating module object from /home/lfarkas/work/lenux/fedora/jna
>  > Initiating a koji session to http://koji.fedoraproject.org/kojihub
>  > Could not log into koji: Opening a SSL connection failed
>  
>  What version of nss do you have installed?  There was a nss build that
>  could not handle the certs offered by FAS. 
the nss issue only effects uploads to the lookaside cache. koji itself uses 
pyopenssl and have no such issues

Dennis