New certs woes

Martin Sourada martin.sourada at gmail.com
Mon Aug 25 08:22:18 UTC 2008


Hi,

I'm having several issues with the new certificates, can somebody help
me solve them? I successfully uploaded new ssh key to fas (git push on
fedorahosted.org is working for me), also I replaced the old
certificates with new ones via fedora-packager-setup. Here is the ls:

-rw-rw-r--  1 mso  mso     2725 2008-08-24 10:25 fedora-browser-cert.p12
-rw-------  1 mso  mso     8557 2008-08-19 15:49 .fedora.cert
-rw-rw-r--  1 mso  mso     6162 2008-08-20 18:47 .fedora-server-ca.cert
-rw-rw-r--  1 mso  mso     6162 2008-08-20 18:47 .fedora-upload-ca.cert

However, I cannot log in to koji web interface. Firefox (after
confirming an exception for the new koji's ssh certificate) asks for my
certificate, I use the fedora-browser-cert.p12 listed above. Details of
the certificate:

Issued to: E=martin.sourada at gmail.com,CN=mso,OU=Upload Files,O=Fedora
Project,ST=North Carolina,C=US
  Serial Number: 00:90
  Valid from 19/08/08 15:49:44 to 19/08/09 15:49:44
  Email: martin.sourada at gmail.com
Issued by: E=admin at fedoraproject.org,CN=Fedora Project CA,OU=Fedora
Project CA,O=Fedora Project,L=Raleigh,ST=North Carolina,C=US
Stored in: Software Security Device

Then error page appears:

Secure Connection Failed
-----------------------------------------------------------------------
An error occurred during a connection to koji.fedoraproject.org.

SSL peer cannot verify your certificate.

(Error code: ssl_error_bad_cert_alert)
-----------------------------------------------------------------------
The page you are trying to view can not be shown because the
authenticity of the received data could not be verified.

 * Please contact the web site owners to inform them of this problem.

[Try again]

Any thoughts of what am I doing wrong? I deleted the old certificate
from firefox and imported the new one, also I restarted firefox numerous
times already and still no luck.

Also uploading new sources to cvs is not working for me (cvs co and cvs
update does though):

make new-sources FILES=subtitleeditor-0.22.3.tar.gz 

Checking : subtitleeditor-0.22.3.tar.gz on
https://cvs.fedoraproject.org/repo/pkgs/upload.cgi...
ERROR: could not check remote file status
make: *** [new-sources] Error 255

Any thoughts what I am missing?

Thanks,
Martin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080825/3e1c2700/attachment.sig>


More information about the fedora-devel-list mailing list