apache - Cannot get a Koji Build system work -

-

i setup koji build environment in centos6 machine server suggested documentation (http://fedoraproject.org/wiki/koji/serverhowto). access koji web using http. yet facing ssl certificate trouble when switching https:

client browser error produced mozilla firefox:

ssl peer unable negotiate acceptable set of security parameters. (error code: ssl_error_handshake_failure_alert)

  • having enabled 2 admin users, koji secific error when running command:

    su kojiman; koji call getloggedinuser

errors under : kojiman:

error: [('ssl routines', 'ssl3_get_server_certificate', 'certificate verify failed')]
#

su kojiadmin; koji call getloggedinuser errors under: kojiadmin

error: [('ssl routines', 'ssl3_read_bytes', 'sslv3 alert bad certificate'), ('ssl routines', 'ssl3_write_bytes', 'ssl handshake failure')]

while in httpd ssl log have following:

############################"

ssl erros:

[wed feb 05 18:37:28 2014] [error] [client 46.21.193.155] certificate verification: error (19): self signed certificate in certificate chain [wed feb 05 18:44:06 2014] [warn] rsa server certificate commonname (cn) `kojihub' not match server name!? [wed feb 05 18:44:06 2014] [warn] rsa server certificate commonname (cn) `kojihub' not match server name!?

  • when test certificate openssl:

    openssl s_client -connect localhost:443 -tls1 -cafile /etc/pki/koji/kojihub.pem

i indeed get:

verify error:num=20:unable local issuer certificate verify error:num=27:certificate not trusted verify error:num=21:unable verify first certificate  verify return:1 139736479307592:error:14094410:ssl routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1256:ssl alert number 40 139736479307592:error:1409e0e5:ssl routines:ssl3_write_bytes:ssl handshake failure:s3_pkt.c:596: verify return code: 21 (unable verify first certificate)

any appreciated!

solved. using wrong certificate main builder. changed in kojid.conf


Comments

Post a Comment

Popular posts from this blog

python - Subclassed QStyledItemDelegate ignores Stylesheet -

-
i'm trying subclass qstyleditemdelegate remove focus rectangle in qcombobox . even though i'm calling base implementation of paint function , nothing else, result different. looks if parts of style-sheet influence bounding box of item taken consideration. class pstyleditemdelegate(qstyleditemdelegate): def __init__(self, *args, **kwds): super(pstyleditemdelegate, self).__init__(*args, **kwds) def paint(self, *args, **kwargs): qstyleditemdelegate.paint(*args, **kwargs) what have paint unmodified qstyleditemdelegate ? as suggested tried replacing pyside pyqt4 , works, appears bug. update pyside 1.1.2 1.2.1 result same. unfortunately switch breaks other parts of code, if there no other suggestions i'm going accept answer. edit bug tracked here
Read more

java - HttpClient 3.1 Connection pooling vs HttpClient 4.3.2 -

-
i have used httpclient3.1(java) connection pooling below : import org.apache.commons.httpclient.httpclient; import org.apache.commons.httpclient.multithreadedhttpconnectionmanager; import org.apache.commons.httpclient.params.httpclientparams; import org.apache.commons.httpclient.params.httpmethodparams; import org.apache.log4j.logger; public class httpclientmanager { private static logger logger = logger.getlogger(httpclientmanager.class); private static multithreadedhttpconnectionmanager connectionmanager = new multithreadedhttpconnectionmanager(); private static httpclientparams clientparams = new httpclientparams(); static { try { clientparams.makelenient(); clientparams.setauthenticationpreemptive(false); clientparams.setparameter(httpmethodparams.so_timeout, new integer(30000)); // set so_timeout clientparams.setparameter(httpmethodparams.head_body_check_timeout, new integer(3000)); // head responses ...
Read more

node.js - StackOverflow API not returning JSON -

-
i using node.js script gather data stackoverflow. know responses gzipped, put code in should take care of that. script follows: var request = require('request'); var zlib = require('zlib'); function getstackoverflowresponse(url, callback){ request(url, {encoding: null}, function(err, response, body){ if(response.headers['content-encoding'] == 'gzip'){ zlib.gunzip(body, function(err, dezipped) { callback(dezipped); }); } else { callback(body); } }); } var url = "https://api.stackexchange.com/docs/questions#pagesize=2&order=desc&min=2014-01-04&max=2014-02-02&sort=activity&tagged=apigee&filter=default&site=stackoverflow&run=true"; getstackoverflowresponse(url, function(questions) { console.log(questions); }); instead of getting json output, i'm getting following response: buffer 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48...
Read more