Il 12/12/2016 05:20, Chenxiong Qi ha scritto:
hi
i get:
aesh]$ fedpkg build
/usr/lib/python2.7/site-packages/pyrpkg/__init__.py:314:
DeprecationWarning: BaseException.message has been deprecated as of
Python 2.6
for (_, _, ssl_reason) in error.message:
You might want to run fedora-packager-setup to regenerate SSL
certificate. For more info see
https://fedoraproject.org/wiki/Using_the_Koji_build_system#Fedora_Account_System_.28FAS2.29_Setup
Could not execute build: Could not auth with koji. Login failed: [('SSL
routines', 'ssl3_get_server_certificate', 'certificate verify failed')]
my "certs" are just refreshed
[gil@localhost ~]$ klist -e
klist: Credentials cache keyring 'persistent:1000:1000' not found
[gil@localhost ~]$ KRB5_TRACE=/dev/stderr koji hello
Kerberos authentication failed: No credentials cache found (-1765328189)
[gil@localhost ~]$ KRB5_TRACE=/dev/stdout kinit g...@fedoraproject.org
[1834] 1481778683.923486: Getting initial credentials for
g...@fedoraproject.org
[1834] 1481778683.936011: Sending request (194 bytes) to FEDORAPROJECT.ORG
[1834] 1481778683.955383: Resolving hostname id.fedoraproject.org
[1834] 1481778685.244445: TLS certificate name matched
"id.fedoraproject.org"
[1834] 1481778685.605098: Sending HTTPS request to https 174.141.234.172:443
[1834] 1481778686.224735: Received answer (270 bytes) from https
174.141.234.172:443
[1834] 1481778686.224762: Terminating TCP connection to https
174.141.234.172:443
[1834] 1481778686.226636: Terminating TCP connection to https
152.19.134.142:443
[1834] 1481778686.230413: Response was not from master KDC
[1834] 1481778686.230479: Received error from KDC:
-1765328359/Additional pre-authentication required
[1834] 1481778686.230522: Processing preauth types: 136, 19, 2, 133
[1834] 1481778686.230535: Selected etype info: etype aes256-cts, salt
"<\dUU>-'9OMNb")7", params ""
[1834] 1481778686.230543: Received cookie: MIT
Password for g...@fedoraproject.org:
[1834] 1481778715.693981: AS key obtained for encrypted timestamp:
aes256-cts/9D63
[1834] 1481778715.694042: Encrypted timestamp (for 1481778715.382358):
plain 301AA011180F32303136313231353035313135355AA105020305D596,
encrypted
1D20CD245821CEDD6BD6478C87D87842C27BAB03D6DF2AB3C7E99299117D3BAFCD73D69E120E0398AC464731231A36C8471C46B3457660E5
[1834] 1481778715.694068: Preauth module encrypted_timestamp (2) (real)
returned: 0/Success
[1834] 1481778715.694075: Produced preauth for next request: 133, 2
[1834] 1481778715.694164: Sending request (289 bytes) to FEDORAPROJECT.ORG
[1834] 1481778715.694206: Resolving hostname id.fedoraproject.org
[1834] 1481778716.747833: TLS certificate name matched
"id.fedoraproject.org"
[1834] 1481778717.98100: Sending HTTPS request to https 174.141.234.172:443
[1834] 1481778717.732801: Received answer (800 bytes) from https
174.141.234.172:443
[1834] 1481778717.732829: Terminating TCP connection to https
174.141.234.172:443
[1834] 1481778717.734651: Terminating TCP connection to https
152.19.134.142:443
[1834] 1481778717.736486: Response was not from master KDC
[1834] 1481778717.736653: Processing preauth types: 19
[1834] 1481778717.736671: Selected etype info: etype aes256-cts, salt
"<\dUU>-'9OMNb")7", params ""
[1834] 1481778717.736678: Produced preauth for next request: (empty)
[1834] 1481778717.736692: AS key determined by preauth: aes256-cts/9D63
[1834] 1481778717.738675: Decrypted AS reply; session key is:
aes256-cts/AE3F
[1834] 1481778717.738714: FAST negotiation: available
[1834] 1481778717.738745: Initializing KEYRING:persistent:1000:1000 with
default princ g...@fedoraproject.org
[1834] 1481778717.738805: Storing g...@fedoraproject.org ->
krbtgt/fedoraproject....@fedoraproject.org in KEYRING:persistent:1000:1000
[1834] 1481778717.739138: Storing config in KEYRING:persistent:1000:1000
for krbtgt/fedoraproject....@fedoraproject.org: fast_avail: yes
[1834] 1481778717.739167: Storing g...@fedoraproject.org ->
krb5_ccache_conf_data/fast_avail/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF:
in KEYRING:persistent:1000:1000
[1834] 1481778717.739240: Storing config in KEYRING:persistent:1000:1000
for krbtgt/fedoraproject....@fedoraproject.org: pa_type: 2
[1834] 1481778717.739260: Storing g...@fedoraproject.org ->
krb5_ccache_conf_data/pa_type/krbtgt\/FEDORAPROJECT.ORG\@FEDORAPROJECT.ORG@X-CACHECONF:
in KEYRING:persistent:1000:1000
[gil@localhost ~]$ KRB5_TRACE=/dev/stderr koji hello
[1836] 1481778754.88097: Getting credentials g...@fedoraproject.org ->
host/koji.fedoraproject....@fedoraproject.org using ccache
KEYRING:persistent:1000:1000
[1836] 1481778754.88234: Retrieving g...@fedoraproject.org ->
host/koji.fedoraproject....@fedoraproject.org from
KEYRING:persistent:1000:1000 with result: -1765328243/Matching
credential not found
[1836] 1481778754.88292: Retrieving g...@fedoraproject.org ->
krbtgt/fedoraproject....@fedoraproject.org from
KEYRING:persistent:1000:1000 with result: 0/Success
[1836] 1481778754.88301: Starting with TGT for client realm:
g...@fedoraproject.org -> krbtgt/fedoraproject....@fedoraproject.org
[1836] 1481778754.88308: Requesting tickets for
host/koji.fedoraproject....@fedoraproject.org, referrals on
[1836] 1481778754.88325: Generated subkey for TGS request: aes256-cts/0BC5
[1836] 1481778754.88373: etypes requested in TGS request: aes256-cts,
aes128-cts, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[1836] 1481778754.88446: Encoding request body and padata into FAST request
[1836] 1481778754.88510: Sending request (982 bytes) to FEDORAPROJECT.ORG
[1836] 1481778754.88735: Resolving hostname id.fedoraproject.org
[1836] 1481778754.980334: TLS certificate name matched
"id.fedoraproject.org"
[1836] 1481778755.256841: Sending HTTPS request to https 209.132.181.16:443
[1836] 1481778755.571345: Received answer (954 bytes) from https
209.132.181.16:443
[1836] 1481778755.571374: Terminating TCP connection to https
209.132.181.16:443
[1836] 1481778755.573288: Terminating TCP connection to https
152.19.134.198:443
[1836] 1481778755.573808: Response was not from master KDC
[1836] 1481778755.573835: Decoding FAST response
[1836] 1481778755.573948: FAST reply key: aes256-cts/D5DA
[1836] 1481778755.573991: TGS reply is for g...@fedoraproject.org ->
host/koji.fedoraproject....@fedoraproject.org with session key
aes256-cts/1C28
[1836] 1481778755.574010: TGS request result: 0/Success
[1836] 1481778755.574014: Received creds for desired service
host/koji.fedoraproject....@fedoraproject.org
[1836] 1481778755.574022: Storing g...@fedoraproject.org ->
host/koji.fedoraproject....@fedoraproject.org in
KEYRING:persistent:1000:1000
[1836] 1481778755.574419: Creating authenticator for
g...@fedoraproject.org -> host/koji.fedoraproject....@fedoraproject.org,
seqnum 1038948541, subkey (null), session key aes256-cts/1C28
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
(_ssl.c:590)
[gil@localhost ~]$ klist -e
Ticket cache: KEYRING:persistent:1000:1000
Default principal: g...@fedoraproject.org
Valid starting Expires Service principal
15/12/2016 06:12:35 16/12/2016 06:11:25
host/koji.fedoraproject....@fedoraproject.org
renew until 22/12/2016 06:11:25, Etype (skey, tkt):
aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96
15/12/2016 06:11:57 16/12/2016 06:11:25
krbtgt/fedoraproject....@fedoraproject.org
renew until 22/12/2016 06:11:25, Etype (skey, tkt):
aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96
[gil@localhost ~]$
any ideas?
thanks in advance
regards
.g
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
