koji

#2592 RFE: improve HTTPS error messages for CLI
Closed: Fixed by tkopecek. Opened by ktdreyer.

Closed: Fixed
Reopen Issue

When the CLI client cannot validate a hub's CA for HTTPS, we print a very vague error message:

$ kojidev list-tags
Error: Unable to connect to server

Adding --debug or --debug-xmlrpc does not give any more relevant information.

It would be more useful to print the exact SSLError from python-requests so that it's easier to understand the problem. For example:

requests.exceptions.SSLError: HTTPSConnectionPool(host='kojidev.example.com', port=443): Max retries exceeded with url: /kojihub (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1124)')))

Metadata Update from @tkopecek:
- Custom field Size adjusted to None
- Issue set to the milestone: 1.24
- Issue tagged with: usability

In #2582, this also happened when an admin set SSLVerifyClient require on the entire server rather than setting it in the specific <Location /kojihub/ssllogin> section

Metadata Update from @tkopecek:
- Issue set to the milestone: 1.25 (was: 1.24)

PR #2705

Metadata Update from @jcupova:
- Issue tagged with: testing-ready

Metadata Update from @mfilip:
- Issue tagged with: testing-done

Commit 5a5bdc7c fixes this issue

Commit 29a34f31 fixes this issue

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/2592

Please continue any further discussion there.
Metadata
None

testing-done testing-ready usability

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.