Bug#722191: marked as done (yum: CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!)

2014-12-30 Thread Debian Bug Tracking System
Your message dated Tue, 30 Dec 2014 12:34:09 +
with message-id 
and subject line Bug#715416: fixed in urlgrabber 3.9.1-4.1
has caused the Debian Bug report #715416,
regarding yum: CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
715416: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715416
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: yum
Version: 3.4.3-2
Severity: normal

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***

I was experimenting with building fedora chroots and under certain
circumstances yum exits with:

  File "/usr/lib/pymodules/python2.7/urlgrabber/grabber.py", line 1193, in
_set_opts
self.curl_obj.setopt(pycurl.SSL_VERIFYHOST, opts.ssl_verify_host)
pycurl.error: (43, 'CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!')

I was using the command:

yum --releasever=19 --nogpg -c rootfs/etc/yum.repos.d/fedora.repo
--disableplugin='*' --disablerepo='*' --enablerepo=fedora --installroot
/tmp/rootfs/ install bash vim-minimal procps-ng yum passwd fedora-release
systemd

I'll attach the fedora.repo file I was using.

I found this forum post which claims that CURLOPT_SSL_VERIFYHOST needs to be 2.
http://devot-ee.com/add-ons/support/simple-s3-uploader/viewthread/9731

I had a simple patch which got around the issue for me.

In addition to the packages picked up by report bug I think the following are
also relevant:

python-pycurl 7.19.0-7
libcurl3-gnutls: 7.32.0-1

Diane Trout



-- System Information:
Debian Release: jessie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable'), (110, 
'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.8-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages yum depends on:
ii  python   2.7.5-4
ii  python-libxml2   2.9.1+dfsg1-3
ii  python-rpm   4.11.1-2
ii  python-sqlite1.0.1-9
ii  python-sqlitecachec  1.1.4-1
ii  python-urlgrabber3.9.1-4
ii  rpm  4.11.1-2

yum recommends no packages.

yum suggests no packages.

-- no debconf information
--- /tmp/yumRepo.py	2013-09-08 14:17:43.692054028 -0700
+++ /usr/lib/python2.7/dist-packages/yum/yumRepo.py	2013-06-26 22:07:25.0 -0700
@@ -504,9 +504,9 @@
  'proxies': self.proxy_dict,
  'timeout': self.timeout,
  'http_headers': tuple(self.__headersListFromDict(cache=cache)),
  'ssl_verify_peer': self.sslverify,
- 'ssl_verify_host': 2 if self.sslverify else 0,
+ 'ssl_verify_host': self.sslverify,
  'ssl_ca_cert': self.sslcacert,
  'ssl_cert': self.sslclientcert,
  'ssl_key': self.sslclientkey,
  'user_agent': default_grabber.opts.user_agent,
[fedora]
name=Fedora $releasever - $basearch
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
enabled=1
#metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch

[fedora-debuginfo]
name=Fedora $releasever - $basearch - Debug
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/debug/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch

[fedora-source]
name=Fedora $releasever - Source
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/source/SRPMS/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch
--- End Message ---
--- Begin Message ---
Source: urlgrabber
Source-Version: 3.9.1-4.1

We believe that the bug you reported is fixed in the latest version of
urlgrabber, whi

Bug#722191: marked as done (yum: CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!)

2014-12-30 Thread Debian Bug Tracking System
Your message dated Tue, 30 Dec 2014 12:34:09 +
with message-id 
and subject line Bug#722191: fixed in urlgrabber 3.9.1-4.1
has caused the Debian Bug report #722191,
regarding yum: CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
722191: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722191
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: yum
Version: 3.4.3-2
Severity: normal

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these lines ***

I was experimenting with building fedora chroots and under certain
circumstances yum exits with:

  File "/usr/lib/pymodules/python2.7/urlgrabber/grabber.py", line 1193, in
_set_opts
self.curl_obj.setopt(pycurl.SSL_VERIFYHOST, opts.ssl_verify_host)
pycurl.error: (43, 'CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!')

I was using the command:

yum --releasever=19 --nogpg -c rootfs/etc/yum.repos.d/fedora.repo
--disableplugin='*' --disablerepo='*' --enablerepo=fedora --installroot
/tmp/rootfs/ install bash vim-minimal procps-ng yum passwd fedora-release
systemd

I'll attach the fedora.repo file I was using.

I found this forum post which claims that CURLOPT_SSL_VERIFYHOST needs to be 2.
http://devot-ee.com/add-ons/support/simple-s3-uploader/viewthread/9731

I had a simple patch which got around the issue for me.

In addition to the packages picked up by report bug I think the following are
also relevant:

python-pycurl 7.19.0-7
libcurl3-gnutls: 7.32.0-1

Diane Trout



-- System Information:
Debian Release: jessie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable'), (110, 
'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.8-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages yum depends on:
ii  python   2.7.5-4
ii  python-libxml2   2.9.1+dfsg1-3
ii  python-rpm   4.11.1-2
ii  python-sqlite1.0.1-9
ii  python-sqlitecachec  1.1.4-1
ii  python-urlgrabber3.9.1-4
ii  rpm  4.11.1-2

yum recommends no packages.

yum suggests no packages.

-- no debconf information
--- /tmp/yumRepo.py	2013-09-08 14:17:43.692054028 -0700
+++ /usr/lib/python2.7/dist-packages/yum/yumRepo.py	2013-06-26 22:07:25.0 -0700
@@ -504,9 +504,9 @@
  'proxies': self.proxy_dict,
  'timeout': self.timeout,
  'http_headers': tuple(self.__headersListFromDict(cache=cache)),
  'ssl_verify_peer': self.sslverify,
- 'ssl_verify_host': 2 if self.sslverify else 0,
+ 'ssl_verify_host': self.sslverify,
  'ssl_ca_cert': self.sslcacert,
  'ssl_cert': self.sslclientcert,
  'ssl_key': self.sslclientkey,
  'user_agent': default_grabber.opts.user_agent,
[fedora]
name=Fedora $releasever - $basearch
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
enabled=1
#metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch

[fedora-debuginfo]
name=Fedora $releasever - $basearch - Debug
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/debug/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch

[fedora-source]
name=Fedora $releasever - Source
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/source/SRPMS/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch
--- End Message ---
--- Begin Message ---
Source: urlgrabber
Source-Version: 3.9.1-4.1

We believe that the bug you reported is fixed in the latest version of
urlgrabber, whi