$ koji -d hello
2023-03-04 12:45:31,516 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:31,516 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:32,059 [DEBUG] koji: Opening new requests session
2023-03-04 12:45:32,060 [ERROR] koji: (gssapi auth failed: requests.exceptions.SSLError: HTTPSConnectionPool(host='koji.fedoraproject.org', port=443): Max retries exceeded with url: /kojihub/ssllogin (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))))
Use following documentation to debug kerberos/gssapi auth issues. https://docs.pagure.org/koji/kerberos_gssapi_debug/
Traceback (most recent call last):
File "/usr/bin/koji", line 331, in <module>
rv = locals()[command].__call__(options, session, args)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.11/site-packages/koji_cli/commands.py", line 7398, in handle_moshimoshi
activate_session(session, options)
File "/usr/lib/python3.11/site-packages/koji_cli/lib.py", line 764, in activate_session
session.gssapi_login(proxyuser=runas)
File "/usr/lib/python3.11/site-packages/koji/__init__.py", line 2669, in gssapi_login
raise GSSAPIAuthError(err)
koji.GSSAPIAuthError: unable to obtain a session (gssapi auth failed: requests.exceptions.SSLError: HTTPSConnectionPool(host='koji.fedoraproject.org', port=443): Max retries exceeded with url: /kojihub/ssllogin (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:992)'))))
Use following documentation to debug kerberos/gssapi auth issues. https://docs.pagure.org/koji/kerberos_gssapi_debug/
You should be using kerberos authentication with Fedora’s koji. Certs are only used for a small number of internal services, and nothing external.
ie, you need a valid kerberos ticket and that will let you authenticate.
See Infrastructure/Kerberos - Fedora Project Wiki for more info.
1 Like
I’m having trouble understanding the title — can you elaborate?
Hello, we’re trying to setup the Koji server from localhost. We followed all the steps given in https://docs.pagure.org/koji/server_howto/
Yet somehow the CLI doesn’t seem to work and keeps giving us the mentioned error.
Are we missing any step ?
openssl s_client -showcerts -connect koji.fedoraproject.org:443
gives a valid output.
thankyou for your inputs. Is there some reference manual or documentation to setup Koji Server on Local host?