brz-svn does not handle unverified server certificates

Martin Steigerwald ms at teamix.de
Wed Oct 24 09:40:49 BST 2007


Hi!

I tried using bzr-svn to branch a path from a subversion repository via 
HTTPS / WEBDAVS and got:

ms at mango> bzr branch https://xyz/svn/somebranch somebranch                                                                      
~/Zeit
bzr: ERROR: pycurl.error: (60, 'server certificate verification failed. 
CAfile: /etc/ssl/certs/ca-certificates.crt')

Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/bzrlib/commands.py", line 800, in 
run_bzr_catch_errors
    return run_bzr(argv)
  File "/usr/lib/python2.4/site-packages/bzrlib/commands.py", line 758, in 
run_bzr
    ret = run(*run_argv)
  File "/usr/lib/python2.4/site-packages/bzrlib/commands.py", line 492, in 
run_argv_aliases
    return self.run(**all_cmd_args)
  File "/usr/lib/python2.4/site-packages/bzrlib/builtins.py", line 866, in run
    br_from = Branch.open(from_location)
  File "/usr/lib/python2.4/site-packages/bzrlib/branch.py", line 127, in open
    possible_transports=possible_transports)
  File "/usr/lib/python2.4/site-packages/bzrlib/bzrdir.py", line 542, in open
    return BzrDir.open_from_transport(t, _unsupported=_unsupported)
  File "/usr/lib/python2.4/site-packages/bzrlib/bzrdir.py", line 579, in 
open_from_transport
    redirected)
  File "/usr/lib/python2.4/site-packages/bzrlib/lazy_import.py", line 116, in 
__call__
    return obj(*args, **kwargs)
  File "/usr/lib/python2.4/site-packages/bzrlib/transport/__init__.py", line 
1552, in do_catching_redirections
    return action(transport)
  File "/usr/lib/python2.4/site-packages/bzrlib/bzrdir.py", line 555, in 
find_format
    return transport, BzrDirFormat.find_format(
  File "/usr/lib/python2.4/site-packages/bzrlib/bzrdir.py", line 1260, in 
find_format
    return format.probe_transport(transport)
  File "/usr/lib/python2.4/site-packages/bzrlib/bzrdir.py", line 1270, in 
probe_transport
    format_string = transport.get(".bzr/branch-format").read()
  File "/usr/lib/python2.4/site-packages/bzrlib/transport/http/__init__.py", 
line 177, in get
    code, response_file = self._get(relpath, None)
  File "/usr/lib/python2.4/site-packages/bzrlib/transport/http/_pycurl.py", 
line 147, in _get
    return self._get_full(relpath)
  File "/usr/lib/python2.4/site-packages/bzrlib/transport/http/_pycurl.py", 
line 182, in _get_full
    self._curl_perform(curl, header)
  File "/usr/lib/python2.4/site-packages/bzrlib/transport/http/_pycurl.py", 
line 268, in _curl_perform
    curl.perform()
error: (60, 'server certificate verification failed. 
CAfile: /etc/ssl/certs/ca-certificates.crt')

bzr 0.91.0 on python 2.4.4.final.0 (linux2)
arguments: 
['/usr/bin/bzr', 'branch', 'https://xyz/svn/somebranch', 'somebranch2']

** please send this report to bazaar at lists.ubuntu.com


I think I could work around the issue by putting the ca 
into /etc/ssl/certs/ca-certificates.crt, but it would be nice, if it would 
ask me whether I want to use that certificate anyway and optionally remember 
my answer.



I am using:

mango:~# apt-show-versions | grep bzr
bzr/etch uptodate 0.91-2~bpo40+1
bzr-svn/unknown uptodate 0.4.3-1

on Debian Etch. bzr-svn is from lenny, bzr is a backport for etch.

Ciao,
-- 
Martin Steigerwald - team(ix) GmbH - http://www.teamix.de
gpg: 19E3 8D42 896F D004 08AC A0CA 1E10 C593 0399 AE90
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20071024/82b44e09/attachment.pgp 


More information about the bazaar mailing list