Re: Packagers - Flag day 2016 Important changes

gil <puntogil@xxxxxxxxx> · Thu, 15 Dec 2016 06:20:23 +0100



      Il 12/12/2016 05:20, Chenxiong Qi ha
        scritto:

      
        hi 

          i get: 

          aesh]$ fedpkg build 

          /usr/lib/python2.7/site-packages/pyrpkg/__init__.py:314: 

          DeprecationWarning: BaseException.message has been deprecated
          as of 

          Python 2.6 

            for (_, _, ssl_reason) in error.message: 

          You might want to run fedora-packager-setup to regenerate SSL
          

          certificate. For more info see 

          https://fedoraproject.org/wiki/Using_the_Koji_build_system#Fedora_Account_System_.28FAS2.29_Setup
          

          Could not execute build: Could not auth with koji. Login
          failed: [('SSL 

          routines', 'ssl3_get_server_certificate', 'certificate verify
          failed')] 

          
          my "certs" are just refreshed 

        
      [gil@localhost ~]$ klist -e

      klist: Credentials cache keyring 'persistent:1000:1000' not found

      [gil@localhost ~]$ KRB5_TRACE=/dev/stderr koji hello

      Kerberos authentication failed: No credentials cache found
      (-1765328189)

      [gil@localhost ~]$ KRB5_TRACE=/dev/stdout kinit
      gil@xxxxxxxxxxxxxxxxx

      [1834] 1481778683.923486: Getting initial credentials for
      gil@xxxxxxxxxxxxxxxxx

      [1834] 1481778683.936011: Sending request (194 bytes) to
      FEDORAPROJECT.ORG

      [1834] 1481778683.955383: Resolving hostname id.fedoraproject.org

      [1834] 1481778685.244445: TLS certificate name matched
      "id.fedoraproject.org"

      [1834] 1481778685.605098: Sending HTTPS request to https
      174.141.234.172:443

      [1834] 1481778686.224735: Received answer (270 bytes) from https
      174.141.234.172:443

      [1834] 1481778686.224762: Terminating TCP connection to https
      174.141.234.172:443

      [1834] 1481778686.226636: Terminating TCP connection to https
      152.19.134.142:443

      [1834] 1481778686.230413: Response was not from master KDC

      [1834] 1481778686.230479: Received error from KDC:
      -1765328359/Additional pre-authentication required

      [1834] 1481778686.230522: Processing preauth types: 136, 19, 2,
      133

      [1834] 1481778686.230535: Selected etype info: etype aes256-cts,
      salt "<\dUU>-'9OMNb")7", params ""

      [1834] 1481778686.230543: Received cookie: MIT

      Password for gil@xxxxxxxxxxxxxxxxx: 

      [1834] 1481778715.693981: AS key obtained for encrypted timestamp:
      aes256-cts/9D63

      [1834] 1481778715.694042: Encrypted timestamp (for
      1481778715.382358): plain
      301AA011180F32303136313231353035313135355AA105020305D596,
      encrypted
1D20CD245821CEDD6BD6478C87D87842C27BAB03D6DF2AB3C7E99299117D3BAFCD73D69E120E0398AC464731231A36C8471C46B3457660E5

      [1834] 1481778715.694068: Preauth module encrypted_timestamp (2)
      (real) returned: 0/Success

      [1834] 1481778715.694075: Produced preauth for next request: 133,
      2

      [1834] 1481778715.694164: Sending request (289 bytes) to
      FEDORAPROJECT.ORG

      [1834] 1481778715.694206: Resolving hostname id.fedoraproject.org

      [1834] 1481778716.747833: TLS certificate name matched
      "id.fedoraproject.org"

      [1834] 1481778717.98100: Sending HTTPS request to https
      174.141.234.172:443

      [1834] 1481778717.732801: Received answer (800 bytes) from https
      174.141.234.172:443

      [1834] 1481778717.732829: Terminating TCP connection to https
      174.141.234.172:443

      [1834] 1481778717.734651: Terminating TCP connection to https
      152.19.134.142:443

      [1834] 1481778717.736486: Response was not from master KDC

      [1834] 1481778717.736653: Processing preauth types: 19

      [1834] 1481778717.736671: Selected etype info: etype aes256-cts,
      salt "<\dUU>-'9OMNb")7", params ""

      [1834] 1481778717.736678: Produced preauth for next request:
      (empty)

      [1834] 1481778717.736692: AS key determined by preauth:
      aes256-cts/9D63

      [1834] 1481778717.738675: Decrypted AS reply; session key is:
      aes256-cts/AE3F

      [1834] 1481778717.738714: FAST negotiation: available

      [1834] 1481778717.738745: Initializing
      KEYRING:persistent:1000:1000 with default princ
      gil@xxxxxxxxxxxxxxxxx

      [1834] 1481778717.738805: Storing gil@xxxxxxxxxxxxxxxxx ->
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx in
      KEYRING:persistent:1000:1000

      [1834] 1481778717.739138: Storing config in
      KEYRING:persistent:1000:1000 for
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx: fast_avail: yes

      [1834] 1481778717.739167: Storing gil@xxxxxxxxxxxxxxxxx ->
krb5_ccache_conf_data/fast_avail/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF:
      in KEYRING:persistent:1000:1000

      [1834] 1481778717.739240: Storing config in
      KEYRING:persistent:1000:1000 for
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx: pa_type: 2

      [1834] 1481778717.739260: Storing gil@xxxxxxxxxxxxxxxxx ->
krb5_ccache_conf_data/pa_type/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF:
      in KEYRING:persistent:1000:1000

      [gil@localhost ~]$ KRB5_TRACE=/dev/stderr koji hello

      [1836] 1481778754.88097: Getting credentials gil@xxxxxxxxxxxxxxxxx
      -> host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx using ccache
      KEYRING:persistent:1000:1000

      [1836] 1481778754.88234: Retrieving gil@xxxxxxxxxxxxxxxxx ->
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx from
      KEYRING:persistent:1000:1000 with result: -1765328243/Matching
      credential not found

      [1836] 1481778754.88292: Retrieving gil@xxxxxxxxxxxxxxxxx ->
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx from
      KEYRING:persistent:1000:1000 with result: 0/Success

      [1836] 1481778754.88301: Starting with TGT for client realm:
      gil@xxxxxxxxxxxxxxxxx ->
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx

      [1836] 1481778754.88308: Requesting tickets for
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx, referrals on

      [1836] 1481778754.88325: Generated subkey for TGS request:
      aes256-cts/0BC5

      [1836] 1481778754.88373: etypes requested in TGS request:
      aes256-cts, aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts,
      camellia256-cts

      [1836] 1481778754.88446: Encoding request body and padata into
      FAST request

      [1836] 1481778754.88510: Sending request (982 bytes) to
      FEDORAPROJECT.ORG

      [1836] 1481778754.88735: Resolving hostname id.fedoraproject.org

      [1836] 1481778754.980334: TLS certificate name matched
      "id.fedoraproject.org"

      [1836] 1481778755.256841: Sending HTTPS request to https
      209.132.181.16:443

      [1836] 1481778755.571345: Received answer (954 bytes) from https
      209.132.181.16:443

      [1836] 1481778755.571374: Terminating TCP connection to https
      209.132.181.16:443

      [1836] 1481778755.573288: Terminating TCP connection to https
      152.19.134.198:443

      [1836] 1481778755.573808: Response was not from master KDC

      [1836] 1481778755.573835: Decoding FAST response

      [1836] 1481778755.573948: FAST reply key: aes256-cts/D5DA

      [1836] 1481778755.573991: TGS reply is for gil@xxxxxxxxxxxxxxxxx
      -> host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx with session
      key aes256-cts/1C28

      [1836] 1481778755.574010: TGS request result: 0/Success

      [1836] 1481778755.574014: Received creds for desired service
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx

      [1836] 1481778755.574022: Storing gil@xxxxxxxxxxxxxxxxx ->
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx in
      KEYRING:persistent:1000:1000

      [1836] 1481778755.574419: Creating authenticator for
      gil@xxxxxxxxxxxxxxxxx ->
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx, seqnum 1038948541,
      subkey (null), session key aes256-cts/1C28

      SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
      failed (_ssl.c:590)

      [gil@localhost ~]$ klist -e

      Ticket cache: KEYRING:persistent:1000:1000

      Default principal: gil@xxxxxxxxxxxxxxxxx

      
      Valid starting       Expires              Service principal

      15/12/2016 06:12:35  16/12/2016 06:11:25 
      host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx

              renew until 22/12/2016 06:11:25, Etype (skey, tkt):
      aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 

      15/12/2016 06:11:57  16/12/2016 06:11:25 
      krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx

              renew until 22/12/2016 06:11:25, Etype (skey, tkt):
      aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 

      [gil@localhost ~]$ 

      
      any ideas?

      thanks in advance

      regards

      .g

    
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx