0.7.0 fails plain ftp on certificate validation error
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Duplicity |
Fix Released
|
Medium
|
Unassigned |
Bug Description
Duplicity 0.7.0 fails with a plain FTP backend on certificate validation. It worked with 0.6.24. I installed lftp because 0.7.0 does not use ncftp anymore.
Command:
duplicity -v 9 --asynchronous-
Output:
Using archive dir: /root/.
Using backup name: 94e55ec9-
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
Import of duplicity.
LFTP version is 4.3.3
Using temporary directory /tmp/duplicity-
Registering (mkstemp) temporary file /tmp/duplicity-
Reading globbing filelist /etc/backup/
Main action: inc
duplicity 0.7.0 (October 23, 2014)
Args: /usr/local/
Linux 1204-php-sql-base-2 3.2.0-69-virtual #103-Ubuntu SMP Tue Sep 2 05:21:29 UTC 2014 x86_64 x86_64
[GCC 4.6.3]
Registering (mkstemp) temporary file /tmp/duplicity-
Temp has 13807632384 available, backup will use approx 60293120.
Reading results of 'lftp -c 'source /tmp/duplicity-
Backtrace of previous error: Traceback (innermost last):
File "/usr/local/
return fn(self, *args)
File "/usr/local/
return [tobytes(x) for x in self.backend.
File "/usr/local/
_, l, _ = self.subprocess
File "/usr/local/
ls: Fatal error: Certificate verification: Not trusted
Attempt 1 failed. BackendException: Error running 'lftp -c 'source /tmp/duplicity-
ls: Fatal error: Certificate verification: Not trusted
Reading results of 'lftp -c 'source /tmp/duplicity-
Backtrace of previous error: Traceback (innermost last):
File "/usr/local/
return fn(self, *args)
File "/usr/local/
return [tobytes(x) for x in self.backend.
File "/usr/local/
_, l, _ = self.subprocess
File "/usr/local/
ls: Fatal error: Certificate verification: Not trusted
Attempt 2 failed. BackendException: Error running 'lftp -c 'source /tmp/duplicity-
ls: Fatal error: Certificate verification: Not trusted
Attempts continue to go on and fail.
The solution for me was to add the following to /etc/lftp.conf:
set ssl:verify-
Then the backup works without issues.
OS: Ubuntu 12.04 LTS 64 bit
Duplicity installed from source, 0.7.0
LFTP version is 4.3.3
[GCC 4.6.3]
/usr/
description: | updated |
Changed in duplicity: | |
milestone: | none → 0.7.01 |
importance: | Undecided → Medium |
status: | New → Fix Committed |
Changed in duplicity: | |
status: | Fix Committed → Fix Released |
It looks like we need to add a manual entry about certificate verification
to the man page, otherwise, duplicity is doing what I think it should,
refusing to work with an untrusted certificate.
NOTE: "Import of duplicity. backends. ftpsbackend Failed: the scheme ftps backends/ ftpsbackend. py to clear the error message.
already has a backend associated with it". It looks like you may have
installed over the top of the old 0.6 release. Please manually delete
duplicity/
On Sat, Oct 25, 2014 at 3:05 AM, Remy van Elst <email address hidden>
wrote:
> Public bug reported: upload --volsize 25 prefix= "94e55ec9- 1cd9-4988- bf86-68e12b24a9 35." "94e55ec9- 1cd9-4988- bf86-68e12b24a9 35." --exclude- device- files globbing- filelist= /etc/backup/ exclude. conf --full-if-older- key=B5EBDA9B --sign-key=8C12A683 / ipaddr cache/duplicity /94e55ec9- 1cd9-4988- bf86-68e12b24a9 35. 1cd9-4988- bf86-68e12b24a9 35. backends. botobackend Succeeded backends. cfbackend Succeeded backends. copycombackend Succeeded backends. dpbxbackend Failed: No module named backends. ftpbackend Succeeded backends. ftpsbackend Failed: the scheme ftps backends. gdocsbackend Succeeded backends. giobackend Succeeded backends. hsibackend Succeeded backends. imapbackend Succeeded backends. localbackend Succeeded backends. megabackend Succeeded backends. par2backend Succeeded backends. rsyncbackend Succeeded backends. sshbackend Succeeded backends. swiftbackend Succeeded backends. sxbackend Succeeded backends. tahoebackend Succeeded backends. webdavbackend Succeeded backends. ~par2wrapperbac kend Succeeded Kvedf4- tempdir Kvedf4- tempdir/ mkstemp- yOu6kX- 1 exclude. conf ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= === bin/duplicity -v 9 --asynchronous- upload prefix= 94e55ec9- 1cd9-4988- bf86-68e12b24a9 35. 94e55ec9- 1cd9-.. .
>
> Duplicity 0.7.0 fails with a plain FTP backend on certificate
> validation. It worked with 0.6.24. I installed lftp because 0.7.0 does
> not use ncftp anymore.
>
> Command:
>
> duplicity -v 9 --asynchronous-
> --tempdir="/tmp" --file-
> --name=
> --exclude-
> than="2D" --encrypt-
> ftp://user@
>
> Output:
>
> Using archive dir:
> /root/.
> Using backup name: 94e55ec9-
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> dropbox
> Import of duplicity.
> Import of duplicity.
> already has a backend associated with it
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> Import of duplicity.
> LFTP version is 4.3.3
> Using temporary directory /tmp/duplicity-
> Registering (mkstemp) temporary file
> /tmp/duplicity-
> Reading globbing filelist /etc/backup/
> Main action: inc
>
> =======
> duplicity 0.7.0 (October 23, 2014)
> Args: /usr/local/
> --volsize 25 --tempdir=/tmp
> --file-
> --name=