Bug 435308

Summary: koji.fedoraproject.org has SSL issues
Product: [Fedora] Fedora Reporter: Horst H. von Brand <vonbrand>
Component: kojiAssignee: David Cantrell <dcantrell>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: rawhideCC: dennis, mikem
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-02-28 16:54:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Horst H. von Brand 2008-02-28 16:44:26 UTC
Description of problem:
When trying to log in to koji (no, I don't know if I have an account there),
firefox complains that the site's certificate isn't trusted. After applying an
exception for the site, and clicking again on "Log in" I get an error
(copy&paste from Firefox):

  Secure Connection Failed

  An error occurred during a connection to koji.fedoraproject.org.

  SSL peer was unable to negotiate an acceptable set of security parameters.

  (Error code: ssl_error_handshake_failure_alert)
       

  The page you are trying to view can not be shown because the authenticity of 
the received data could not be verified.

      * Please contact the web site owners to inform them of this problem.

Version-Release number of selected component (if applicable):
No idea on koji
firefox-3.0-0.beta3.29.nightly20080227.fc9.i386
openssl-0.9.8g-5.fc9.i686

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Jesse Keating 2008-02-28 16:54:14 UTC
That's because it's expecting you to have a cert (yours) imported, which if you
don't have an account, you won't.

Comment 2 Mike McLean 2008-02-28 19:05:06 UTC
Since this is happening at the httpd level, I'm not sure if we can trap the
error and provide something more useful.  Might be worth looking into, but I
don't see it as a priority right now.