fedpkg koji error

[Toshio Kuratomi]

On Fri, Oct 08, 2010 at 10:57:58AM -0700, Jesse Keating wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 10/8/10 10:52 AM, Farkas Levente wrote:
> > rhel-6 beta2's
> > nss-3.12.6-3.el6.x86_64
> > anyway yesterday morning i was not able to build, but afternoot after a
> > new cert ie: fedora-packager-setup i was able to build again. then today
> > i can't build again...
> > 
> 
> Are you generating the cert on multiple hosts?  You can only ever have
> one cert, you have to copy it manually to all the hosts that you work from.
> 
This would seem to fit the symptoms of being able to build yesterday but not
today -- the crl that invalidates an old key when a new one is created would
take time to be generated and then propogated to the servers so creating
multiple new certs would have all of them working for a period of time.

> Also, I seem to recall RHEL6's nss having issues with our cert, somebody
> more familiar with the problem will have to verify though.
> 
Dennis informed me this morning that the koji stuff uses pyOpenSSL so it
shouldn't be affected by nss.  Uploading to the lookaside cache uses curl
which uses nss in RHEL6 and all current Fedoras.

One way to test whether the nss or openssl library is at fault would be to
see if you can upload to lookaside even though building doesn't work or
vice-versa.  If neither one works, it's more likely that there's something
wrong with the certificate itself.

-Toshio
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20101008/b06fb18e/attachment.bin