#2592 RFE: improve HTTPS error messages for CLI
Closed: Fixed 3 years ago by tkopecek. Opened 3 years ago by ktdreyer.

When the CLI client cannot validate a hub's CA for HTTPS, we print a very vague error message:

$ kojidev list-tags
Error: Unable to connect to server

Adding --debug or --debug-xmlrpc does not give any more relevant information.

It would be more useful to print the exact SSLError from python-requests so that it's easier to understand the problem. For example:

requests.exceptions.SSLError: HTTPSConnectionPool(host='kojidev.example.com', port=443): Max retries exceeded with url: /kojihub (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1124)')))

Metadata Update from @tkopecek:
- Custom field Size adjusted to None
- Issue set to the milestone: 1.24
- Issue tagged with: usability

3 years ago

In #2582, this also happened when an admin set SSLVerifyClient require on the entire server rather than setting it in the specific <Location /kojihub/ssllogin> section

Metadata Update from @tkopecek:
- Issue set to the milestone: 1.25 (was: 1.24)

3 years ago

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

3 years ago

Metadata Update from @mfilip:
- Issue tagged with: testing-done

3 years ago

Login to comment on this ticket.

Metadata
Related Pull Requests
  • #2705 Merged 3 years ago