Bazaar Version Control System

ca-certificates.crt not found on OS X

Reported by Martin Pool on 2012-02-08
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Bazaar
High
Vincent Ladeuil

Bug Description

A user of bzr 2.5b6 on OS X reports:

$ bzr launchpad-login djfroofy
Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:319: No root certificates specified for verification of other-side certificates.

That file doesn't exist.

OS X must have some root certificates. I don't know if they are in a file that we can easily read.

Related branches

Yonggang Luo (luoyonggang) wrote :

D:\CI\bld\vcs\svn>bzr branch lp:~luoyonggang/subvertpy/python3
Value "C:\Python27\ca_bundle.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:331: No root certificates specified for verification of other-side certificates.

D:\CI\bld\vcs\svn>

Vincent Ladeuil (vila) wrote :

Removing the duplicate.

We should use this bug to target an additional value for ssl.ca_reqs that says:
- if valid root certificates are available, verify
- if they aren't issue a warning

Use this as the default value.

Vincent Ladeuil (vila) on 2012-02-16
Changed in bzr:
assignee: nobody → Vincent Ladeuil (vila)
milestone: none → 2.5.0
status: Triaged → Fix Released
Alex Yurchenko (ayurchen) wrote :

Solaris x86 11, python 2.6, bzr-2.5.0 installed from source in /usr/local

$ bzr pull lp:codership-mysql/5.5 --remember
Value "/etc/ssl/certs/ca-certificates.crt" is not valid for "ssl.ca_certs"
No valid trusted SSL CA certificates file set. See 'bzr help ssl.ca_certs' for more information on setting trusted CAs.

See `bzr help ssl.ca_certs` for how to specify trusted CAcertificates.
Pass -Ossl.cert_reqs=none to disable certificate verification entirely.

bzr: ERROR: _ssl.c:316: No root certificates specified for verification of other-side certificates.

Vincent Ladeuil (vila) wrote :

@Alex: The bug title mentions OSX :)

Could you please file a new bug and tell us where/how the ssl certificates are stored on Solaris ?

In the mean time, as mentioned in the error message, you can disable the cert verification with -Ossl.cert_reqs=none.

Bob Vincent (pillarsdotnet) wrote :

Tried using "-Ossl.cert_reqs=none" and the error persists with no change.

Vincent Ladeuil (vila) wrote :

@Bob: This bug is marked 'Fix released', could you please file a new one and mention which versions of bzr and OSX you're using ?

Also, giving additional details about your environment and how the error manifests itself can only help, so, a relevant excerpt of your .bzr.log, which site you were trying to connect, things like that.

anthony tyson (atyson1959) wrote :

how do i get the bugs out

affects: bzr → ubuntu
Changed in ubuntu:
assignee: Vincent Ladeuil (vila) → nobody
milestone: 2.5.0 → none
affects: ubuntu → boss
William Grant (wgrant) on 2012-10-16
affects: boss → bzr
Martin Packman (gz) on 2012-10-16
Changed in bzr:
assignee: nobody → Vincent Ladeuil (vila)
milestone: none → 2.5.0
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers