On 07/04/2016 01:25 AM, Adrian Schröter wrote:

On Sonntag, 3. Juli 2016, 18:28:34 CEST wrote Larry Finger:

...

My OBS builds of VirtualBox at openSUSE:Factory are failing with the following:

[ 1243s] OTHER/virtualbox-rpmlintrc [ 1243s] OTHER/virtualbox.cpio.rsasign [ 1243s] OTHER/_statistics could not retrieve ssl certificate: 400 remote error: problems making Certificate Request

gave up after 9 failed build attempts...

As far as I know, nothing has changed in the spec file that could cause this problem. In fact, the same arrangement builds for the openSUSE:Leap:42.2, and openSUSE:Leap:42.1:Update branches.

What can I do?

You don't speak about the build in openSUSE:Factory, right? (it is building there).

My first guess is that you build in a project with a too old signing key, so the SSL certificate for kernel modules for secure boot can be created.

osc signkey --create $YOUR_PROJECT

That command did not fix the problem. I'm still getting the messages. Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

On 07/04/2016 12:09 PM, Adrian Schröter wrote:

On Montag, 4. Juli 2016, 12:04:48 CEST wrote Larry Finger:

...

On 07/04/2016 01:25 AM, Adrian Schröter wrote:

...

On Sonntag, 3. Juli 2016, 18:28:34 CEST wrote Larry Finger:

...

My OBS builds of VirtualBox at openSUSE:Factory are failing with the following:

[ 1243s] OTHER/virtualbox-rpmlintrc [ 1243s] OTHER/virtualbox.cpio.rsasign [ 1243s] OTHER/_statistics could not retrieve ssl certificate: 400 remote error: problems making Certificate Request

gave up after 9 failed build attempts...

As far as I know, nothing has changed in the spec file that could cause this problem. In fact, the same arrangement builds for the openSUSE:Leap:42.2, and openSUSE:Leap:42.1:Update branches.

What can I do?

You don't speak about the build in openSUSE:Factory, right? (it is building there).

My first guess is that you build in a project with a too old signing key, so the SSL certificate for kernel modules for secure boot can be created.

osc signkey --create $YOUR_PROJECT

That command did not fix the problem. I'm still getting the messages.

Can you please provide some pointers where you build?

My project is home:lwfinger:branches:Virtualization/virtualbox. The key creation command was "osc signkey --ssl home:lwfinger:branches:Virtualization". Using home:lwfinger as the project failed. From my local directory, the "osc build" works OK, but the builds triggered by "osc ci" fail with the SSL message. Strangely, the "osc r" command shows that everything succeeded. A representative build log is at https://build.opensuse.org/package/live_build_log/home:lwfinger:branches:hom.... Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

Adrian Schröter writes:

On Montag, 4. Juli 2016, 12:28:51 CEST wrote Larry Finger:

...

My project is home:lwfinger:branches:Virtualization/virtualbox. The key creation command was "osc signkey --ssl home:lwfinger:branches:Virtualization". Using home:lwfinger as the project failed.

It will work if you create the home:lwfinger project first. Then you will not have that problem again.

...

build log is at https://build.opensuse.org/package/live_build_log/home:lwfinger:branches:hom....

That's a different project: home:lwfinger:branches:home:lwfinger:branches:Virtualization

k, this seems to be (a cosmetic) failure in the routing which requests the build log. It is not really part of the build log and your job did succeed for real.

Did it? $ osc rblt home:lwfinger:branches:home:lwfinger:branches:Virtualization/virtualbox/Assist_repo_checker/x86_64 | tail -1 gave up after 9 failed build attempts... Andreas. -- Andreas Schwab, schwab@linux-m68k.org GPG Key fingerprint = 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED5 "And now for something completely different." -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

On 07/05/2016 12:55 AM, Adrian Schröter wrote:

On Montag, 4. Juli 2016, 19:38:24 CEST wrote Adrian Schröter:

...

On Montag, 4. Juli 2016, 12:28:51 CEST wrote Larry Finger:

...

On 07/04/2016 12:09 PM, Adrian Schröter wrote:

...

On Montag, 4. Juli 2016, 12:04:48 CEST wrote Larry Finger:

...

On 07/04/2016 01:25 AM, Adrian Schröter wrote:

...

On Sonntag, 3. Juli 2016, 18:28:34 CEST wrote Larry Finger: > My OBS builds of VirtualBox at openSUSE:Factory are failing with the following: > > [ 1243s] OTHER/virtualbox-rpmlintrc > [ 1243s] OTHER/virtualbox.cpio.rsasign > [ 1243s] OTHER/_statistics > could not retrieve ssl certificate: 400 remote error: problems making > Certificate Request > > gave up after 9 failed build attempts... > > As far as I know, nothing has changed in the spec file that could cause this > problem. In fact, the same arrangement builds for the openSUSE:Leap:42.2, and > openSUSE:Leap:42.1:Update branches. > > What can I do?

You don't speak about the build in openSUSE:Factory, right? (it is building there).

My first guess is that you build in a project with a too old signing key, so the SSL certificate for kernel modules for secure boot can be created.

osc signkey --create $YOUR_PROJECT

That command did not fix the problem. I'm still getting the messages.

Can you please provide some pointers where you build?

My project is home:lwfinger:branches:Virtualization/virtualbox. The key creation command was "osc signkey --ssl home:lwfinger:branches:Virtualization". Using home:lwfinger as the project failed. From my local directory, the "osc build" works OK, but the builds triggered by "osc ci" fail with the SSL message. Strangely, the "osc r" command shows that everything succeeded. A representative build log is at https://build.opensuse.org/package/live_build_log/home:lwfinger:branches:hom....

k, this seems to be (a cosmetic) failure in the routing which requests the build log. It is not really part of the build log and your job did succeed for real.

To be exact, this is the secound signing build job, not the build itself.

Zhe on-the-fly ssl certificate creation is failing, because the project name is part of the key. Works for GPG, but not SSL. We need to limit the length there..

As a workaround do this:

osc signkey --create home:lwfinger osc signkey --delete home:lwfinger:branches:home:lwfinger:branches:Virtualization osc rebuild home:lwfinger:branches:home:lwfinger:branches:Virtualization virtualbox

The key stuff failed as follows: finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> osc signkey --create home:lwfinger Server returned an error: HTTP Error 404: Not Found home:lwfinger finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> osc signkey --delete home:lwfinger:branches:home:lwfinger:branches:Virtualization Server returned an error: HTTP Error 403: Forbidden No permission to delete public key for project 'home:lwfinger:branches:home:lwfinger:branches:Virtualization'. Either maintainer permissions by upper project or admin permissions is needed. finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> osc rebuild home:lwfinger:branches:home:lwfinger:branches:Virtualization virtualbox ok finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

On 07/05/2016 11:11 AM, Andreas Schwab wrote:

Larry Finger writes:

...

finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> osc signkey --create home:lwfinger Server returned an error: HTTP Error 404: Not Found home:lwfinger

You need to create the home:lwfinger project first. Run "osc meta prj -e home:lwfinger", do some trivial editing, and save.

Doing the above did not help. I still get the same error about the SSL certificate. Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org

On 07/06/2016 09:19 AM, Adrian Schröter wrote:

On Mittwoch, 6. Juli 2016, 08:44:29 CEST wrote Larry Finger:

...

On 07/05/2016 11:11 AM, Andreas Schwab wrote:

...

Larry Finger writes:

...

finger@linux-1t8h:~/home:lwfinger:branches:Virtualization/virtualbox> osc signkey --create home:lwfinger Server returned an error: HTTP Error 404: Not Found home:lwfinger

You need to create the home:lwfinger project first. Run "osc meta prj -e home:lwfinger", do some trivial editing, and save.

Doing the above did not help. I still get the same error about the SSL certificate.

And you deleted also the one in your branch project? And you retriggered the build?

You can also wait for thursday, we will deploy a fix for the long names for SSL certificates.

I think I did the above. In any case, I will be traveling the rest of the week. I will try again on Monday. Larry -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org