#5285 git clone error-self signed certificate in certificate chain (_ssl.c:1091)
Closed: Fixed by sdhanru. Opened by sdhanru.

1.pagure version 5.13.2
2.Pagure Auth set to
SSH_FOLDER = '/srv/git/.ssh'

GIT_AUTH_BACKEND = "pagure_authorized_keys"

HTTP_REPO_ACCESS_GITOLITE = None

SSH_COMMAND_NON_REPOSPANNER = ([
"/usr/bin/%(cmd)s",
"/srv/git/repositories/%(reponame)s",
], {"GL_USER": "%(username)s"})
3.git clone ssh://git@pagure.test.test/weizige.git
Authorized users only. All activities may be monitored and reported.
Traceback (most recent call last):
File "/usr/lib/python3.7/site-packages/urllib3/connectionpool.py", line 677, in urlopen
chunked=chunked,
File "/usr/lib/python3.7/site-packages/urllib3/connectionpool.py", line 381, in make_request
self._validate_conn(conn)
File "/usr/lib/python3.7/site-packages/urllib3/connectionpool.py", line 976, in _validate_conn
conn.connect()
File "/usr/lib/python3.7/site-packages/urllib3/connection.py", line 370, in connect
ssl_context=context,
File "/usr/lib/python3.7/site-packages/urllib3/util/ssl
.py", line 377, in ssl_wrap_socket
return context.wrap_socket(sock, server_hostname=server_hostname)
File "/usr/lib64/python3.7/ssl.py", line 423, in wrap_socket
session=session
File "/usr/lib64/python3.7/ssl.py", line 870, in _create
self.do_handshake()
File "/usr/lib64/python3.7/ssl.py", line 1139, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1091)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/lib/python3.7/site-packages/requests/adapters.py", line 449, in send
timeout=timeout
File "/usr/lib/python3.7/site-packages/urllib3/connectionpool.py", line 725, in urlopen
method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]
File "/usr/lib/python3.7/site-packages/urllib3/util/retry.py", line 439, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='pagure.test.test', port=443): Max retries exceeded with url: /pv/ssh/checkaccess/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1091)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "/usr/libexec/pagure/aclchecker.py", line 73, in
resp = requests.post(url, data=data, headers=headers)
File "/usr/lib/python3.7/site-packages/requests/api.py", line 119, in post
return request('post', url, data=data, json=json, kwargs)
File "/usr/lib/python3.7/site-packages/requests/api.py", line 61, in request
return session.request(method=method, url=url,
kwargs)
File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 530, in request
resp = self.send(prep, send_kwargs)
File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 665, in send
history = [resp for resp in gen]
File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 665, in
history = [resp for resp in gen]
File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 245, in resolve_redirects
adapter_kwargs
File "/usr/lib/python3.7/site-packages/requests/sessions.py", line 643, in send
r = adapter.send(request, **kwargs)
File "/usr/lib/python3.7/site-packages/requests/adapters.py", line 514, in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='pagure.test.test', port=443): Max retries exceeded with url: /pv/ssh/checkaccess/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1091)')))
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.


It's Pagure 5.13.3 not 5.13.2.

Metadata Update from @sdhanru:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata