SSL: CERTIFICATE_VERIFY_FAILED

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi

i get :

$ KRB5_TRACE=/dev/stdout kinit gil@xxxxxxxxxxxxxxxxx

[2285] 1482484266.902495: Getting initial credentials for gil@xxxxxxxxxxxxxxxxx
[2285] 1482484266.902725: Sending request (194 bytes) to FEDORAPROJECT.ORG
[2285] 1482484266.902911: Resolving hostname id.fedoraproject.org
[2285] 1482484267.583802: TLS certificate name matched "id.fedoraproject.org"
[2285] 1482484267.800894: Sending HTTPS request to https 209.132.181.16:443
[2285] 1482484268.32078: Received answer (270 bytes) from https 209.132.181.16:443 [2285] 1482484268.32097: Terminating TCP connection to https 209.132.181.16:443
[2285] 1482484268.33672: Response was not from master KDC
[2285] 1482484268.33717: Received error from KDC: -1765328359/Additional pre-authentication required
[2285] 1482484268.33774: Processing preauth types: 136, 19, 2, 133
[2285] 1482484268.33782: Selected etype info: etype aes256-cts, salt "<\dUU>-'9OMNb")7", params ""
[2285] 1482484268.33786: Received cookie: MIT
Password for gil@xxxxxxxxxxxxxxxxx:
[2285] 1482484284.346052: AS key obtained for encrypted timestamp: aes256-cts/9D63 [2285] 1482484284.346102: Encrypted timestamp (for 1482484284.235522): plain 301AA011180F32303136313232333039313132345AA1050203039802, encrypted 9440A234EB9CA0BDC41D60BF4F08AB1ABE4890F15918ABD1305E93775D2FBF81946C7AD58A68B4019244A1B4A6E8F5F31D3759FD58842F1D [2285] 1482484284.346124: Preauth module encrypted_timestamp (2) (real) returned: 0/Success
[2285] 1482484284.346131: Produced preauth for next request: 133, 2
[2285] 1482484284.346150: Sending request (289 bytes) to FEDORAPROJECT.ORG
[2285] 1482484284.346186: Resolving hostname id.fedoraproject.org
[2285] 1482484284.918643: TLS certificate name matched "id.fedoraproject.org"
[2285] 1482484285.136809: Sending HTTPS request to https 209.132.181.16:443
[2285] 1482484285.382621: Received answer (781 bytes) from https 209.132.181.16:443 [2285] 1482484285.382646: Terminating TCP connection to https 209.132.181.16:443
[2285] 1482484285.383957: Response was not from master KDC
[2285] 1482484285.384015: Processing preauth types: 19
[2285] 1482484285.384022: Selected etype info: etype aes256-cts, salt "<\dUU>-'9OMNb")7", params ""
[2285] 1482484285.384027: Produced preauth for next request: (empty)
[2285] 1482484285.384036: AS key determined by preauth: aes256-cts/9D63
[2285] 1482484285.384505: Decrypted AS reply; session key is: aes256-cts/0AE8
[2285] 1482484285.384523: FAST negotiation: available
[2285] 1482484285.384539: Initializing KEYRING:persistent:1000:1000 with default princ gil@xxxxxxxxxxxxxxxxx [2285] 1482484285.384571: Storing gil@xxxxxxxxxxxxxxxxx -> krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx in KEYRING:persistent:1000:1000 [2285] 1482484285.384865: Storing config in KEYRING:persistent:1000:1000 for krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx: fast_avail: yes [2285] 1482484285.384908: Storing gil@xxxxxxxxxxxxxxxxx -> krb5_ccache_conf_data/fast_avail/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF: in KEYRING:persistent:1000:1000 [2285] 1482484285.384946: Storing config in KEYRING:persistent:1000:1000 for krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx: pa_type: 2 [2285] 1482484285.384956: Storing gil@xxxxxxxxxxxxxxxxx -> krb5_ccache_conf_data/pa_type/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF: in KEYRING:persistent:1000:1000

$ koji build --scratch --arch-override x86_64 rawhide /home/gil/springframework/springframework-3.2.18-1.fc26.src.rpm SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

$ klist -e
Ticket cache: KEYRING:persistent:1000:1000
Default principal: gil@xxxxxxxxxxxxxxxxx

Valid starting       Expires              Service principal
23/12/2016 10:11:32 24/12/2016 10:11:07 host/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx renew until 30/12/2016 10:11:07, Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 23/12/2016 10:11:25 24/12/2016 10:11:07 krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx renew until 30/12/2016 10:11:07, Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96

$ fedora-cert -v
Verifying Certificate
cert expires: 2017-05-26
Traceback (most recent call last):
  File "/usr/bin/fedora-cert", line 85, in <module>
    main(opts)
  File "/usr/bin/fedora-cert", line 63, in main
    fedora_cert.verify_cert()
File "/usr/lib/python2.7/site-packages/fedora_cert/__init__.py", line 69, in verify_cert
    revoked = crl.get_revoked()
File "/usr/lib/python2.7/site-packages/OpenSSL/crypto.py", line 1921, in get_revoked
    revoked_stack = self._crl.crl.revoked
AttributeError: '_cffi_backend.CData' object has no attribute 'crl'

what's wrong?

thanks in advance

regards

.g
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux