[Bug 602355] New: zypper can't connect to repo with iChain authentication
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c0 Summary: zypper can't connect to repo with iChain authentication Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: zypp-maintainers@forge.provo.novell.com ReportedBy: sbahling@novell.com QAContact: qa@suse.de Found By: --- Blocker: --- libzypp-6.21.2-1.1.1 aria2-1.8.2-0.1.1 repo URL: https://build.novell.com/repositories/KMP:/Broadcom:/tg3/SLE_10_SP2/ When refreshing, zypper is unable to download the repodata files. From the log file, it seems that the initial connection for detecting the repo type works, but the file downloading fails. aria2 does not give much info in the zypper.log about the failure. I ran the aria2c command from commandline with a logfile specified and it seems to fail with the certificate handling: 2010-05-04 11:33:00.070200 ERROR - CUID#6 - Download aborted. URI=https://build.novell.com/repositories/KMP:/Broadcom:/tg3/SLE_10_SP2/repodata... Exception: [AbstractCommand.cc:195] URI=https://build.novell.com/repositories/KMP:/Broadcom:/tg3/SLE_10_SP2/repodata... -> [SocketCore.cc:817] Certificate verification failed. Cause: self signed certificate in certificate chain -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c1 --- Comment #1 from Scott Bahling <sbahling@novell.com> 2010-05-04 12:06:52 UTC --- Created an attachment (id=359020) --> (http://bugzilla.novell.com/attachment.cgi?id=359020) zypper.log -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c2 --- Comment #2 from Scott Bahling <sbahling@novell.com> 2010-05-04 12:08:30 UTC --- Created an attachment (id=359022) --> (http://bugzilla.novell.com/attachment.cgi?id=359022) aria2c.log -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c4 Scott Bahling <sbahling@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |sbahling@novell.com --- Comment #4 from Scott Bahling <sbahling@novell.com> 2010-05-06 09:27:02 UTC --- seems to be an iChain setup problem. Will test again with iChain set to Basic Authentication. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c5 Scott Bahling <sbahling@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium --- Comment #5 from Scott Bahling <sbahling@novell.com> 2010-05-14 14:26:33 UTC --- pasting relevant offline discussion here: On Wed, 2010-05-05 at 12:28 +0200, Michael Schroeder wrote:
On Wed, May 05, 2010 at 12:26:48PM +0200, Michael Andres wrote:
To me it looks like being a server side problem. Trying to access repomd.xml, I get a redirect to https://build.novell.com/ICSLogin, but libzypp won't be able to fill out the form. I would expect a 401 authentication required instead.
In that case it's an iChain setup problem. It has be be set up for BasicAuthentication, so that it doesn't show a login page.
-- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c6 Scott Bahling <sbahling@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|sbahling@novell.com | --- Comment #6 from Scott Bahling <sbahling@novell.com> 2010-05-14 14:27:19 UTC --- I checked and iChain is setup to accept BasicAuthentication when initiated from the client. Else it defaults to the login form (which I need in this case). I am able to fetch files with wget --auth-no-challenge. I can't get aria2c to work though. The original tested repo is no longer there. The following can be used for testing: https://build.novell.com/repositories/Broadcom:/tg3/SLE_10_SP3/ -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=602355 http://bugzilla.novell.com/show_bug.cgi?id=602355#c7 Scott Bahling <sbahling@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P3 - Medium |P2 - High --- Comment #7 from Scott Bahling <sbahling@novell.com> 2010-06-17 09:27:57 UTC --- Can someone take a look at this? Any repo under https://build.novell.com/repositories/PLDP:/ can be used to reproduce. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com