pycurl SSL certificate error against https://code.launchpad.net/

[tdflanders]

thomas@thomas-laptop:~$ bzr get https://code.launchpad.net/~ubuntu-core-dev/hal/ubuntu
bzr: ERROR: pycurl.error: (60, 'server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt')

Traceback (most recent call last):
  File "/usr/lib/python2.5/site-packages/bzrlib/commands.py", line 893, in run_bzr_catch_errors
    return run_bzr(argv)
  File "/usr/lib/python2.5/site-packages/bzrlib/commands.py", line 839, in run_bzr
    ret = run(*run_argv)
  File "/usr/lib/python2.5/site-packages/bzrlib/commands.py", line 539, in run_argv_aliases
    return self.run(**all_cmd_args)
  File "/usr/lib/python2.5/site-packages/bzrlib/builtins.py", line 953, in run
    from_location)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 888, in open_tree_or_branch
    bzrdir = klass.open(location)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 766, in open
    return BzrDir.open_from_transport(t, _unsupported=_unsupported)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 803, in open_from_transport
    redirected)
  File "/usr/lib/python2.5/site-packages/bzrlib/lazy_import.py", line 125, in __call__
    return obj(*args, **kwargs)
  File "/usr/lib/python2.5/site-packages/bzrlib/transport/__init__.py", line 1634, in do_catching_redirections
    return action(transport)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 780, in find_format
    transport, _server_formats=_server_formats)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 1634, in find_format
    return format.probe_transport(transport)
  File "/usr/lib/python2.5/site-packages/bzrlib/bzrdir.py", line 2617, in probe_transport
    server_version = medium.protocol_version()
  File "/usr/lib/python2.5/site-packages/bzrlib/smart/medium.py", line 593, in protocol_version
    client_protocol.query_version()
  File "/usr/lib/python2.5/site-packages/bzrlib/smart/protocol.py", line 769, in query_version
    self.call('hello')
  File "/usr/lib/python2.5/site-packages/bzrlib/smart/protocol.py", line 617, in call
    self._request.finished_writing()
  File "/usr/lib/python2.5/site-packages/bzrlib/smart/medium.py", line 421, in finished_writing
    self._finished_writing()
  File "/usr/lib/python2.5/site-packages/bzrlib/transport/http/__init__.py", line 575, in _finished_writing
    data = self._medium.send_http_smart_request(self._buffer)
  File "/usr/lib/python2.5/site-packages/bzrlib/transport/http/__init__.py", line 552, in send_http_smart_request
    code, body_filelike = t._post(bytes)
  File "/usr/lib/python2.5/site-packages/bzrlib/transport/http/_pycurl.py", line 267, in _post
    self._curl_perform(curl, header, ['Expect: '])
  File "/usr/lib/python2.5/site-packages/bzrlib/transport/http/_pycurl.py", line 341, in _curl_perform
    curl.perform()
error: (60, 'server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt')

bzr 1.9 on python 2.5.3 (linux2)
arguments: ['/usr/bin/bzr', 'get', 'https://code.launchpad.net/~ubuntu-core-dev/hal/ubuntu']
encoding: 'UTF-8', fsenc: 'UTF-8', lang: 'en_IE.UTF-8'
plugins:
  bzrtools /usr/lib/python2.5/site-packages/bzrlib/plugins/bzrtools [1.9.0]
  launchpad /usr/lib/python2.5/site-packages/bzrlib/plugins/launchpad [unknown]
  rebase /usr/lib/python2.5/site-packages/bzrlib/plugins/rebase [0.4.2]
*** Bazaar has encountered an internal error.
    Please report a bug at https://bugs.launchpad.net/bzr/+filebug
    including this traceback, and a description of what you
    were doing when the error occurred.
thomas@thomas-laptop:~$

[tdflanders (thomasdelbeke)]

thomas@thomas-laptop:~$ lsb_release -rd ; uname -a ; apt-cache policy linux linux-source linux-source-2.6.28 hal bzr bzr-tools launchpad rebase ca-certificates ca-certificates-java pycurl libcurl libcurl0
Description: Ubuntu jaunty (development branch)
Release: 9.04
Linux thomas-laptop 2.6.28-3-generic #4-Ubuntu SMP Fri Dec 12 22:48:15 UTC 2008 i686 GNU/Linux
linux:
  Installed: 2.6.28.3.3
  Candidate: 2.6.28.3.3
  Version table:
 *** 2.6.28.3.3 0
        500 http://ie.archive.ubuntu.com jaunty/restricted Packages
        100 /var/lib/dpkg/status
linux-source:
  Installed: 2.6.28.3.3
  Candidate: 2.6.28.3.3
  Version table:
 *** 2.6.28.3.3 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
linux-source-2.6.28:
  Installed: 2.6.28-3.4
  Candidate: 2.6.28-3.4
  Version table:
 *** 2.6.28-3.4 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
hal:
  Installed: 0.5.12~rc1-0ubuntu3
  Candidate: 0.5.12~rc1-0ubuntu3
  Version table:
 *** 0.5.12~rc1-0ubuntu3 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
bzr:
  Installed: 1.9-1
  Candidate: 1.9-1
  Version table:
 *** 1.9-1 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
ca-certificates:
  Installed: 20080809
  Candidate: 20080809
  Version table:
 *** 20080809 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
ca-certificates-java:
  Installed: 20081028
  Candidate: 20081028
  Version table:
 *** 20081028 0
        500 http://ie.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status
W: Unable to locate package bzr-tools
W: Unable to locate package launchpad
W: Unable to locate package rebase
W: Unable to locate package pycurl
W: Unable to locate package libcurl
W: Unable to locate package libcurl0
thomas@thomas-laptop:~$

[Martin Pool (mbp)]

  status confirmed
  importance high
  tag pycurl ssl
  summary pycurl SSL certificate error against https://code.launchpad.net/

Thanks for the bug report.

I can reproduce this using this command.

--
Martin <http://launchpad.net/~mbp>

[Martin Pool (mbp)]

  importance high
  tag launchpad

If I try from the command line using curl on the same URL, it reports that it could
verify the certificate OK. However, if I use bzr against e.g.
https://bazaar.launchpad.net/ I get the same error.

As a workaround, you can use bzr+ssh://bazaar.launchpad.net/... if you
have an SSH key registered with Launchpad.

--
Martin <http://launchpad.net/~mbp>

[Martin Pool (mbp)]

  status confirmed
  importance high
  tag pycurl ssl
  summary "pycurl SSL certificate error against https://code.launchpad.net/"

Thanks for the bug report.

I can reproduce this using this command.

--
Martin <http://launchpad.net/~mbp>