#332 TLS issue on cbs.centos.org with koji 1.24 (reverted to 1.23)
Closed: Fixed 2 years ago by arrfab. Opened 2 years ago by arrfab.

After a quick maintenance update earlier today, we noticed an issue between kojiweb and hub wrt TLS auth :

 requests.exceptions.SSLError: HTTPSConnectionPool(host='cbs.centos.org', port=443): Max  retries exceeded with url: /kojihub (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))

No config change and just update.
Worth knowing that it koji-cli => hub auths works fine, so only web component seems to have issue.
A simple dnf downgrade koji on the hub/web node solved the issue so adding it here to investigate and so fix the issue to proceed with the real upgrade/update


Metadata Update from @arrfab:
- Issue tagged with: cbs, centos-common-infra, medium-gain, medium-trouble

2 years ago

Created https://pagure.io/koji/issue/2878 to see how that can be solved upstream

investigated in collaborate with upstream and PR in upstream doc to cover changes is on its way.
cbs.centos.org was then upgraded after the change to ansible role was applied and tested first on dev/stg env

Metadata Update from @arrfab:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Metadata Update from @arrfab:
- Issue assigned to arrfab

2 years ago

Login to comment on this ticket.

Metadata
Boards 2
CBS Status: Backlog