It looks like we need to add a manual entry about certificate verification
to the man page, otherwise, duplicity is doing what I think it should,
refusing to work with an untrusted certificate.

NOTE:  "Import of duplicity.backends.ftpsbackend Failed: the scheme ftps
already has a backend associated with it".  It looks like you may have
installed over the top of the old 0.6 release.  Please manually delete
duplicity/backends/ftpsbackend.py to clear the error message.


On Sat, Oct 25, 2014 at 3:05 AM, Remy van Elst <email address hidden>
wrote:

> Public bug reported:
>
>     Duplicity 0.7.0 fails with a plain FTP backend on certificate
> validation. It worked  with 0.6.24. I installed lftp because 0.7.0 does
> not use ncftp anymore.
>
>     Command:
>
>         duplicity -v 9 --asynchronous-upload --volsize 25
> --tempdir="/tmp" --file-prefix="94e55ec9-1cd9-4988-bf86-68e12b24a935."
> --name="94e55ec9-1cd9-4988-bf86-68e12b24a935." --exclude-device-files
> --exclude-globbing-filelist=/etc/backup/exclude.conf --full-if-older-
> than="2D" --encrypt-key=B5EBDA9B --sign-key=8C12A683   /
> ftp://user@ipaddr
>
>     Output:
>
>         Using archive dir:
> /root/.cache/duplicity/94e55ec9-1cd9-4988-bf86-68e12b24a935.
>         Using backup name: 94e55ec9-1cd9-4988-bf86-68e12b24a935.
>         Import of duplicity.backends.botobackend Succeeded
>         Import of duplicity.backends.cfbackend Succeeded
>         Import of duplicity.backends.copycombackend Succeeded
>         Import of duplicity.backends.dpbxbackend Failed: No module named
> dropbox
>         Import of duplicity.backends.ftpbackend Succeeded
>         Import of duplicity.backends.ftpsbackend Failed: the scheme ftps
> already has a backend associated with it
>         Import of duplicity.backends.gdocsbackend Succeeded
>         Import of duplicity.backends.giobackend Succeeded
>         Import of duplicity.backends.hsibackend Succeeded
>         Import of duplicity.backends.imapbackend Succeeded
>         Import of duplicity.backends.localbackend Succeeded
>         Import of duplicity.backends.megabackend Succeeded
>         Import of duplicity.backends.par2backend Succeeded
>         Import of duplicity.backends.rsyncbackend Succeeded
>         Import of duplicity.backends.sshbackend Succeeded
>         Import of duplicity.backends.swiftbackend Succeeded
>         Import of duplicity.backends.sxbackend Succeeded
>         Import of duplicity.backends.tahoebackend Succeeded
>         Import of duplicity.backends.webdavbackend Succeeded
>         Import of duplicity.backends.~par2wrapperbackend Succeeded
>         LFTP version is 4.3.3
>         Using temporary directory /tmp/duplicity-Kvedf4-tempdir
>         Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1
>         Reading globbing filelist /etc/backup/exclude.conf
>         Main action: inc
>
> ================================================================================
>         duplicity 0.7.0 (October 23, 2014)
>         Args: /usr/local/bin/duplicity -v 9 --asynchronous-upload
> --volsize 25 --tempdir=/tmp
> --file-prefix=94e55ec9-1cd9-4988-bf86-68e12b24a935.
> --name=94e55ec9-1cd9-4988-bf86-68e12b24a935. --exclude-device-files
> --exclude-globbing-filelist=/etc/backup/exclude.conf
> --full-if-older-than=2D --encrypt-key=B5EBDA9B --sign-key=8C12A683 /
> ftp://user@ipaddr
>         Linux 1204-php-sql-base-2 3.2.0-69-virtual #103-Ubuntu SMP Tue Sep
> 2 05:21:29 UTC 2014 x86_64 x86_64
>         /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>         [GCC 4.6.3]
>
> ================================================================================
>         Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-Cm3YqW-2
>         Temp has 13807632384 available, backup will use approx 60293120.
>         Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>         Backtrace of previous error: Traceback (innermost last):
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>             return fn(self, *args)
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>             return [tobytes(x) for x in self.backend._list()]
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>             _, l, _ = self.subprocess_popen(commandline)
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>             (private, result, stdout + '\n' + stderr))
>          BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>         ls: Fatal error: Certificate verification: Not trusted
>
>
>         Attempt 1 failed. BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>         ls: Fatal error: Certificate verification: Not trusted
>
>
>         Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>         Backtrace of previous error: Traceback (innermost last):
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>             return fn(self, *args)
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>             return [tobytes(x) for x in self.backend._list()]
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>             _, l, _ = self.subprocess_popen(commandline)
>           File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>             (private, result, stdout + '\n' + stderr))
>          BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>         ls: Fatal error: Certificate verification: Not trusted
>
>
>         Attempt 2 failed. BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>         ls: Fatal error: Certificate verification: Not trusted
>
>     Attempts continue to go on and fail.
>
>     The solution for me was to add the following to /etc/lftp.conf:
>
>         set ssl:verify-certificate no
>
>     Then the backup works without issues.
>
>     OS: Ubuntu 12.04 LTS 64 bit
>     Duplicity installed from source, 0.7.0
>     LFTP version is 4.3.3
>     [GCC 4.6.3]
>     /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>
> ** Affects: duplicity
>      Importance: Undecided
>          Status: New
>
> ** Description changed:
>
> - Duplicity 0.7.0 fails with a plain FTP backend on certificate
> +     Duplicity 0.7.0 fails with a plain FTP backend on certificate
>   validation. It worked  with 0.6.24. I installed lftp because 0.7.0 does
>   not use ncftp anymore.
>
>       Command:
>
>           duplicity -v 9 --asynchronous-upload --volsize 25
>   --tempdir="/tmp" --file-prefix="94e55ec9-1cd9-4988-bf86-68e12b24a935."
>   --name="94e55ec9-1cd9-4988-bf86-68e12b24a935." --exclude-device-files
>   --exclude-globbing-filelist=/etc/backup/exclude.conf --full-if-older-
>   than="2D" --encrypt-key=B5EBDA9B --sign-key=8C12A683   /
>   ftp://user@ipaddr
>
>       Output:
>
>           Using archive dir:
> /root/.cache/duplicity/94e55ec9-1cd9-4988-bf86-68e12b24a935.
>           Using backup name: 94e55ec9-1cd9-4988-bf86-68e12b24a935.
>           Import of duplicity.backends.botobackend Succeeded
>           Import of duplicity.backends.cfbackend Succeeded
>           Import of duplicity.backends.copycombackend Succeeded
>           Import of duplicity.backends.dpbxbackend Failed: No module named
> dropbox
>           Import of duplicity.backends.ftpbackend Succeeded
>           Import of duplicity.backends.ftpsbackend Failed: the scheme ftps
> already has a backend associated with it
>           Import of duplicity.backends.gdocsbackend Succeeded
>           Import of duplicity.backends.giobackend Succeeded
>           Import of duplicity.backends.hsibackend Succeeded
>           Import of duplicity.backends.imapbackend Succeeded
>           Import of duplicity.backends.localbackend Succeeded
>           Import of duplicity.backends.megabackend Succeeded
>           Import of duplicity.backends.par2backend Succeeded
>           Import of duplicity.backends.rsyncbackend Succeeded
>           Import of duplicity.backends.sshbackend Succeeded
>           Import of duplicity.backends.swiftbackend Succeeded
>           Import of duplicity.backends.sxbackend Succeeded
>           Import of duplicity.backends.tahoebackend Succeeded
>           Import of duplicity.backends.webdavbackend Succeeded
>           Import of duplicity.backends.~par2wrapperbackend Succeeded
>           LFTP version is 4.3.3
>           Using temporary directory /tmp/duplicity-Kvedf4-tempdir
>           Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1
>           Reading globbing filelist /etc/backup/exclude.conf
>           Main action: inc
>
> ================================================================================
>           duplicity 0.7.0 (October 23, 2014)
> -         Args: /usr/local/bin/duplicity -v 9 --asynchronous-upload
> --volsize 25 --tempdir=/tmp
> --file-prefix=94e55ec9-1cd9-4988-bf86-68e12b24a935.
> --name=94e55ec9-1cd9-4988-bf86-68e12b24a935. --exclude-device-files
> --exclude-globbing-filelist=/etc/backup/exclude.conf
> --full-if-older-than=2D --encrypt-key=B5EBDA9B --sign-key=8C12A683 /
> ftp://<email address hidden>@85.222.228.67
> +         Args: /usr/local/bin/duplicity -v 9 --asynchronous-upload
> --volsize 25 --tempdir=/tmp
> --file-prefix=94e55ec9-1cd9-4988-bf86-68e12b24a935.
> --name=94e55ec9-1cd9-4988-bf86-68e12b24a935. --exclude-device-files
> --exclude-globbing-filelist=/etc/backup/exclude.conf
> --full-if-older-than=2D --encrypt-key=B5EBDA9B --sign-key=8C12A683 /
> ftp://user@ipaddr
>           Linux 1204-php-sql-base-2 3.2.0-69-virtual #103-Ubuntu SMP Tue
> Sep 2 05:21:29 UTC 2014 x86_64 x86_64
>           /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>           [GCC 4.6.3]
>
> ================================================================================
>           Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-Cm3YqW-2
>           Temp has 13807632384 available, backup will use approx 60293120.
>           Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>           Backtrace of previous error: Traceback (innermost last):
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>               return fn(self, *args)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>               return [tobytes(x) for x in self.backend._list()]
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>               _, l, _ = self.subprocess_popen(commandline)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>               (private, result, stdout + '\n' + stderr))
>            BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Attempt 1 failed. BackendException: Error running 'lftp -c
> 'source /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1,
> with output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>           Backtrace of previous error: Traceback (innermost last):
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>               return fn(self, *args)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>               return [tobytes(x) for x in self.backend._list()]
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>               _, l, _ = self.subprocess_popen(commandline)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>               (private, result, stdout + '\n' + stderr))
>            BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Attempt 2 failed. BackendException: Error running 'lftp -c
> 'source /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1,
> with output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>       Attempts continue to go on and fail.
>
>       The solution for me was to add the following to /etc/lftp.conf:
>
>           set ssl:verify-certificate no
>
>       Then the backup works without issues.
>
>       OS: Ubuntu 12.04 LTS 64 bit
>       Duplicity installed from source, 0.7.0
>       LFTP version is 4.3.3
>       [GCC 4.6.3]
>       /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>
> --
> You received this bug notification because you are subscribed to
> Duplicity.
> https://bugs.launchpad.net/bugs/1385599
>
> Title:
>   0.7.0 fails plain ftp on certificate validation error
>
> Status in Duplicity - Bandwidth Efficient Encrypted Backup:
>   New
>
> Bug description:
>       Duplicity 0.7.0 fails with a plain FTP backend on certificate
>   validation. It worked  with 0.6.24. I installed lftp because 0.7.0
>   does not use ncftp anymore.
>
>       Command:
>
>           duplicity -v 9 --asynchronous-upload --volsize 25
>   --tempdir="/tmp" --file-prefix="94e55ec9-1cd9-4988-bf86-68e12b24a935."
>   --name="94e55ec9-1cd9-4988-bf86-68e12b24a935." --exclude-device-files
>   --exclude-globbing-filelist=/etc/backup/exclude.conf --full-if-older-
>   than="2D" --encrypt-key=B5EBDA9B --sign-key=8C12A683   /
>   ftp://user@ipaddr
>
>       Output:
>
>           Using archive dir:
> /root/.cache/duplicity/94e55ec9-1cd9-4988-bf86-68e12b24a935.
>           Using backup name: 94e55ec9-1cd9-4988-bf86-68e12b24a935.
>           Import of duplicity.backends.botobackend Succeeded
>           Import of duplicity.backends.cfbackend Succeeded
>           Import of duplicity.backends.copycombackend Succeeded
>           Import of duplicity.backends.dpbxbackend Failed: No module named
> dropbox
>           Import of duplicity.backends.ftpbackend Succeeded
>           Import of duplicity.backends.ftpsbackend Failed: the scheme ftps
> already has a backend associated with it
>           Import of duplicity.backends.gdocsbackend Succeeded
>           Import of duplicity.backends.giobackend Succeeded
>           Import of duplicity.backends.hsibackend Succeeded
>           Import of duplicity.backends.imapbackend Succeeded
>           Import of duplicity.backends.localbackend Succeeded
>           Import of duplicity.backends.megabackend Succeeded
>           Import of duplicity.backends.par2backend Succeeded
>           Import of duplicity.backends.rsyncbackend Succeeded
>           Import of duplicity.backends.sshbackend Succeeded
>           Import of duplicity.backends.swiftbackend Succeeded
>           Import of duplicity.backends.sxbackend Succeeded
>           Import of duplicity.backends.tahoebackend Succeeded
>           Import of duplicity.backends.webdavbackend Succeeded
>           Import of duplicity.backends.~par2wrapperbackend Succeeded
>           LFTP version is 4.3.3
>           Using temporary directory /tmp/duplicity-Kvedf4-tempdir
>           Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1
>           Reading globbing filelist /etc/backup/exclude.conf
>           Main action: inc
>
> ================================================================================
>           duplicity 0.7.0 (October 23, 2014)
>           Args: /usr/local/bin/duplicity -v 9 --asynchronous-upload
> --volsize 25 --tempdir=/tmp
> --file-prefix=94e55ec9-1cd9-4988-bf86-68e12b24a935.
> --name=94e55ec9-1cd9-4988-bf86-68e12b24a935. --exclude-device-files
> --exclude-globbing-filelist=/etc/backup/exclude.conf
> --full-if-older-than=2D --encrypt-key=B5EBDA9B --sign-key=8C12A683 /
> ftp://user@ipaddr
>           Linux 1204-php-sql-base-2 3.2.0-69-virtual #103-Ubuntu SMP Tue
> Sep 2 05:21:29 UTC 2014 x86_64 x86_64
>           /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>           [GCC 4.6.3]
>
> ================================================================================
>           Registering (mkstemp) temporary file
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-Cm3YqW-2
>           Temp has 13807632384 available, backup will use approx 60293120.
>           Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>           Backtrace of previous error: Traceback (innermost last):
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>               return fn(self, *args)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>               return [tobytes(x) for x in self.backend._list()]
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>               _, l, _ = self.subprocess_popen(commandline)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>               (private, result, stdout + '\n' + stderr))
>            BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Attempt 1 failed. BackendException: Error running 'lftp -c
> 'source /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1,
> with output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Reading results of 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls ''''
>           Backtrace of previous error: Traceback (innermost last):
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 368, in
> inner_retry
>               return fn(self, *args)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 567, in
> list
>               return [tobytes(x) for x in self.backend._list()]
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backends/ftpbackend.py",
> line 104, in _list
>               _, l, _ = self.subprocess_popen(commandline)
>             File
> "/usr/local/lib/python2.7/dist-packages/duplicity/backend.py", line 488, in
> subprocess_popen
>               (private, result, stdout + '\n' + stderr))
>            BackendException: Error running 'lftp -c 'source
> /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1, with
> output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>
>           Attempt 2 failed. BackendException: Error running 'lftp -c
> 'source /tmp/duplicity-Kvedf4-tempdir/mkstemp-yOu6kX-1;ls '''': returned 1,
> with output:
>
>           ls: Fatal error: Certificate verification: Not trusted
>
>       Attempts continue to go on and fail.
>
>       The solution for me was to add the following to /etc/lftp.conf:
>
>           set ssl:verify-certificate no
>
>       Then the backup works without issues.
>
>       OS: Ubuntu 12.04 LTS 64 bit
>       Duplicity installed from source, 0.7.0
>       LFTP version is 4.3.3
>       [GCC 4.6.3]
>       /usr/bin/python2 2.7.3 (default, Feb 27 2014, 19:58:35)
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/duplicity/+bug/1385599/+subscriptions
>