Hrm, SSL issues?

Chris Weyl chris.weyl at gmail.com
Tue Nov 8 15:33:44 UTC 2005


Ok, so this is probably something trivial, but I've been seeing these
SSL errors.  I don't know if it had to do with the recent plague
updates or something else on this system (I'd imagine not, as it's
dedicated to the buildsys), but it's rather perplexing.  It seems to
be referring to an expired cert, but after peeking at the certs all of
them seem to expire in 2015.

>From the client side:
-----------------------------
[cweyl at twink FC-3]$ plague-client list
Traceback (most recent call last):
  File "/usr/bin/plague-client", line 420, in ?
    cli = PlagueClient(os.path.expanduser(cfg_file))
  File "/usr/bin/plague-client", line 85, in __init__
    self._check_api_version(self._server)
  File "/usr/bin/plague-client", line 90, in _check_api_version
    server_ver = server.api_version()
  File "/usr/lib/python2.4/xmlrpclib.py", line 1096, in __call__
    return self.__send(self.__name, args)
  File "/usr/lib/python2.4/xmlrpclib.py", line 1383, in __request
    verbose=self.__verbose
  File "/usr/lib/python2.4/xmlrpclib.py", line 1129, in request
    self.send_content(h, request_body)
  File "/usr/lib/python2.4/xmlrpclib.py", line 1243, in send_content
    connection.endheaders()
  File "/usr/lib/python2.4/httplib.py", line 794, in endheaders
    self._send_output()
  File "/usr/lib/python2.4/httplib.py", line 675, in _send_output
    self.send(msg)
  File "/usr/lib/python2.4/httplib.py", line 654, in send
    self.sock.sendall(str)
  File "/usr/lib/python2.4/site-packages/plague/SSLConnection.py",
line 79, in sendall
    return self.__dict__["conn"].sendall(data, flags)
OpenSSL.SSL.Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE',
'certificate verify failed')]


>From the server side:
------------------------------
Exception happened during processing of request from ('xx.xx.xx.xx', 59214)
Traceback (most recent call last):
  File "/usr/lib/python2.4/SocketServer.py", line 463, in
process_request_thread    self.finish_request(request, client_address)
  File "/usr/lib/python2.4/SocketServer.py", line 254, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/usr/lib/python2.4/SocketServer.py", line 521, in __init__
    self.handle()
  File "/usr/lib/python2.4/BaseHTTPServer.py", line 314, in handle
    self.handle_one_request()
  File "/usr/lib/python2.4/BaseHTTPServer.py", line 297, in handle_one_request
    self.raw_requestline = self.rfile.readline()
  File "/usr/lib/python2.4/socket.py", line 340, in readline
    data = self._sock.recv(self._rbufsize)
  File "/usr/lib/python2.4/site-packages/plague/SSLConnection.py",
line 97, in recv
    return self.__dict__["conn"].recv(bufsize, flags)
Error: [('SSL routines', 'SSL3_READ_BYTES', 'sslv3 alert certificate
expired'), ('SSL routines', 'SSL3_READ_BYTES', 'ssl handshake
failure')]
----------------------------------------


Any thoughts?  Google isn't turning up anything that looks useful.

                                  -Chris




More information about the buildsys mailing list