Bug 753370

Summary: [abrt] fedora-packager-0.5.9.4-1.fc16: proxyclient.py:380:send_request:error: (60, 'Peer certificate cannot be authenticated with given CA certificates')
Product: [Fedora] Fedora Reporter: Amir Hedayaty <hedayaty>
Component: fedora-packagerAssignee: Dennis Gilmore <dennis>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 16CC: dcantrell, dennis, rhbugs
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: abrt_hash:bccd67c19fd5e4a11ca151593de9bcc253710051
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-13 13:58:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Amir Hedayaty 2011-11-12 01:45:16 UTC
libreport version: 2.0.7
abrt_version:   2.0.6
cmdline:        /usr/bin/python /usr/bin/fedora-packager-setup
comment:        trying to create a CA for myself!
executable:     /usr/bin/fedora-packager-setup
kernel:         3.1.0-5.fc16.x86_64
reason:         proxyclient.py:380:send_request:error: (60, 'Peer certificate cannot be authenticated with given CA certificates')
time:           Fri 11 Nov 2011 03:01:36 AM PST
uid:            1000
username:       amir

backtrace:
:proxyclient.py:380:send_request:error: (60, 'Peer certificate cannot be authenticated with given CA certificates')
:
:Traceback (most recent call last):
:  File "/usr/bin/fedora-packager-setup", line 148, in <module>
:    main()
:  File "/usr/bin/fedora-packager-setup", line 112, in main
:    fedora_cert.create_user_cert()
:  File "/usr/lib/python2.7/site-packages/fedora_cert/__init__.py", line 96, in create_user_cert
:    cert = fas.user_gencert()
:  File "/usr/lib/python2.7/site-packages/fedora/client/fas2.py", line 565, in user_gencert
:    request = self.send_request('user/dogencert', auth=True)
:  File "/usr/lib/python2.7/site-packages/fedora/client/baseclient.py", line 344, in send_request
:    auth_params=auth_params, retries=retries)
:  File "/usr/lib/python2.7/site-packages/fedora/client/proxyclient.py", line 380, in send_request
:    request.perform()
:error: (60, 'Peer certificate cannot be authenticated with given CA certificates')
:
:Local variables in innermost frame:
:username: 'amir'
:retries: 0
:req_params: None
:i: ('user_name', 'amir')
:self: <fedora.client.fas2.AccountSystem object at 0x1baae90>
:request: <pycurl.Curl object at 0x1c1b320>
:session_id: None
:req_data: 'login=Login&password=Killthemall1&user_name=amir'
:auth_params: {'username': 'amir', 'password': 'Killthemall1'}
:headers: ['User-agent: Fedora Account System Client/0.3.25.1', 'Accept: application/json']
:num_tries: 0
:complete_params: {'login': 'Login', 'password': 'Killthemall1', 'user_name': 'amir'}
:url: 'https://admin.fedoraproject.org/accounts/user/dogencert'
:file_params: None
:method: 'user/dogencert'
:password: 'Killthemall1'
:data: None
:response: <fedora.client.proxyclient._PyCurlData object at 0x1bd1150>

Comment 1 Josh Boyer 2011-12-05 12:38:25 UTC
I'm seeing the same traceback when trying to run fedora-easy-karma.

[jwboyer@r2d2 ~]$ sudo fedora-easy-karma 
Getting list of installed packages...
Getting list of packages in updates-testing...
Traceback (most recent call last):
  File "/usr/bin/fedora-easy-karma", line 510, in <module>
    FedoraEasyKarma()
  File "/usr/bin/fedora-easy-karma", line 310, in __init__
    testing_updates = bc.query(release=release, status="testing", limit=1000)["updates"]
  File "/usr/lib/python2.7/site-packages/fedora/client/bodhi.py", line 147, in query
    return self.send_request('list', req_params=params, auth=auth)
  File "/usr/lib/python2.7/site-packages/fedora/client/baseclient.py", line 344, in send_request
    auth_params=auth_params, retries=retries)
  File "/usr/lib/python2.7/site-packages/fedora/client/proxyclient.py", line 380, in send_request
    request.perform()
pycurl.error: (60, 'Peer certificate cannot be authenticated with given CA certificates')
[jwboyer@r2d2 ~]$ rpm -q fedora-packager
fedora-packager-0.5.9.4-1.fc16.noarch
[jwboyer@r2d2 ~]$

Comment 2 Josh Boyer 2011-12-06 01:27:07 UTC
OK, for me this is still a bogus nss update that is on this system.  Downgrading the nspr/nss* packages allowed this to work again.

[jwboyer@r2d2 ~]$ sudo yum downgrade nss nspr nss-util nss-sysinit nss-tools
Loaded plugins: langpacks, refresh-packagekit
Setting up Downgrade Process
fedora                                                   | 4.2 kB     00:00     
updates                                                  | 4.7 kB     00:00     
updates-testing                                          | 4.7 kB     00:00     
Resolving Dependencies
--> Running transaction check
---> Package nspr.i686 0:4.8.8-4.fc16 will be a downgrade
---> Package nspr.i686 0:4.8.9-2.fc16 will be erased
---> Package nss.i686 0:3.12.10-7.fc16 will be a downgrade
---> Package nss.i686 0:3.13.1-2.fc16 will be erased
---> Package nss-sysinit.i686 0:3.12.10-7.fc16 will be a downgrade
---> Package nss-sysinit.i686 0:3.13.1-2.fc16 will be erased
---> Package nss-tools.i686 0:3.12.10-7.fc16 will be a downgrade
---> Package nss-tools.i686 0:3.13.1-2.fc16 will be erased
---> Package nss-util.i686 0:3.12.10-1.fc16 will be a downgrade
---> Package nss-util.i686 0:3.13.1-1.fc16 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package             Arch         Version                  Repository      Size
================================================================================
Downgrading:
 nspr                i686         4.8.8-4.fc16             fedora         113 k
 nss                 i686         3.12.10-7.fc16           fedora         778 k
 nss-sysinit         i686         3.12.10-7.fc16           fedora          32 k
 nss-tools           i686         3.12.10-7.fc16           fedora         745 k
 nss-util            i686         3.12.10-1.fc16           fedora          47 k

Transaction Summary
================================================================================
Downgrade     5 Packages

Total download size: 1.7 M
Is this ok [y/N]: y
Downloading Packages:
(1/5): nspr-4.8.8-4.fc16.i686.rpm                        | 113 kB     00:00     
(2/5): nss-3.12.10-7.fc16.i686.rpm                       | 778 kB     00:00     
(3/5): nss-sysinit-3.12.10-7.fc16.i686.rpm               |  32 kB     00:00     
(4/5): nss-tools-3.12.10-7.fc16.i686.rpm                 | 745 kB     00:00     
(5/5): nss-util-3.12.10-1.fc16.i686.rpm                  |  47 kB     00:00     
--------------------------------------------------------------------------------
Total                                           1.9 MB/s | 1.7 MB     00:00     
Running Transaction Check
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : nspr-4.8.8-4.fc16.i686                                      1/10 
  Installing : nss-util-3.12.10-1.fc16.i686                                2/10 
  Installing : nss-sysinit-3.12.10-7.fc16.i686                             3/10 
  Installing : nss-3.12.10-7.fc16.i686                                     4/10 
  Installing : nss-tools-3.12.10-7.fc16.i686                               5/10 
  Cleanup    : nss-tools-3.13.1-2.fc16.i686                                6/10 
  Cleanup    : nss-3.13.1-2.fc16.i686                                      7/10 
  Cleanup    : nss-sysinit-3.13.1-2.fc16.i686                              8/10 
  Cleanup    : nss-util-3.13.1-1.fc16.i686                                 9/10 
  Cleanup    : nspr-4.8.9-2.fc16.i686                                     10/10 

Removed:
  nspr.i686 0:4.8.9-2.fc16                nss.i686 0:3.13.1-2.fc16             
  nss-sysinit.i686 0:3.13.1-2.fc16        nss-tools.i686 0:3.13.1-2.fc16       
  nss-util.i686 0:3.13.1-1.fc16          

Installed:
  nspr.i686 0:4.8.8-4.fc16                nss.i686 0:3.12.10-7.fc16            
  nss-sysinit.i686 0:3.12.10-7.fc16       nss-tools.i686 0:3.12.10-7.fc16      
  nss-util.i686 0:3.12.10-1.fc16         

Complete!
[jwboyer@r2d2 ~]$ 
[jwboyer@r2d2 ~]$ sudo fedora-easy-karma 
Getting list of installed packages...
Getting list of packages in updates-testing...
================================================================================
     cheese-3.2.2-1.fc16
================================================================================

Comment 3 Fedora End Of Life 2013-01-16 13:15:43 UTC
This message is a reminder that Fedora 16 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 16. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '16'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 16's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 16 is end of life. If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora, you are encouraged to click on 
"Clone This Bug" and open it against that version of Fedora.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 4 Fedora End Of Life 2013-02-13 13:58:12 UTC
Fedora 16 changed to end-of-life (EOL) status on 2013-02-12. Fedora 16 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.