The default Client Authentication Type is SSLVerifyClient require in koji-hub's ssl.conf, but in koji-web's /usr/share/koji-web/scripts/index.py line 162: def _getServer(environ): opts = environ['koji.options'] session = koji.ClientSession(opts['KojiHubURL'], opts={'krbservice': opts['KrbService'], 'krb_rdns': opts['KrbRDNS']})
Could you please add some ssl related settings? make koji-hub happy. 'serverca': opts['KojiHubCA'], 'cert': opts['KojiAdminCert']
You should be able to use ssl login without problems via options WebCert and KojiHubCA Isn't it working in your deployment? (See _sslLogin/_assertLoginusage in code)
WebCert
KojiHubCA
_sslLogin
_assertLogin
Metadata Update from @mikem: - Issue close_status updated to: Insufficient data - Issue status updated to: Closed (was: Open)
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/koji/koji/issues/534
Please continue any further discussion there.