bzr, pycurl, and self-signed certs?

[Bob Tanner]

I take it pycurl doesn't like self-signed certs? I did put my CA
into /etc/ssl/certs/ca-certificates.crt, but it doesn't seem to help.


$ bzr get https://bazaar.domain.com/dns
bzr: ERROR: pycurl.error: (60, 'server certificate verification failed.
CAfile: /etc/ssl/certs/ca-certificates.crt')

Traceback (most recent call last):
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/commands.py", line
650, in run_bzr_catch_errors
    return run_bzr(argv)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/commands.py", line
612, in run_bzr
    ret = run(*run_argv)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/commands.py", line
304, in run_argv_aliases
    return self.run(**all_cmd_args)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/builtins.py", line
722, in run
    br_from = Branch.open(from_location)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/branch.py", line 119,
in open
    control = bzrdir.BzrDir.open(base, _unsupported)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/bzrdir.py", line 496,
in open
    return BzrDir.open_from_transport(t, _unsupported=_unsupported)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/bzrdir.py", line 505,
in open_from_transport
    format = BzrDirFormat.find_format(transport)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/bzrdir.py", line
1055, in find_format
    return format.probe_transport(transport)
  File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/bzrdir.py", line
1065, in probe_transport
    format_string = transport.get(".bzr/branch-format").read()
 
File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/transport/http/__init__.py",
line 226, in get
    code, response_file = self._get(relpath, None)
 
File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/transport/http/_pycurl.py",
line 124, in _get
    return self._get_full(relpath)
 
File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/transport/http/_pycurl.py",
line 159, in _get_full
    self._curl_perform(curl)
 
File "/home/tanner/projects/bazaar-ng/bzr.dev/bzrlib/transport/http/_pycurl.py",
line 245, in _curl_perform
    curl.perform()
error: (60, 'server certificate verification failed.
CAfile: /etc/ssl/certs/ca-certificates.crt')

bzr 0.14.0dev0 on python 2.4.4.final.0 (linux2)
arguments: ['/home/tanner/bin/bzr', 'get', 'https://bazaar.domain.com/dns']

** please send this report to bazaar-ng at lists.ubuntu.com

-- 
Bob Tanner <tanner at domain.com>          | Phone : (952)943-8700
http://www.domain.com, Minnesota, Linux | Fax   : (952)943-8500
Key fingerprint = AB15 0BDF BCDE 4369 5B42  1973 7CF1 A709 2CC1 B288