David Weisbrod's picture

My LAMP has been using tklbam for quite some time now and it stopped working on 4-4-2012.  I ran a manual backup from Webmin and it failed with a "server certificate verification failed" error.

> tklbam-backup
Traceback (most recent call last): 
File "/usr/bin/tklbam-backup", line 266, in <module> 
File "/usr/bin/tklbam-backup", line 195, in main 
conf.profile = get_profile(hb) 
File "/usr/bin/tklbam-backup", line 122, in get_profile 
new_profile = hb.get_new_profile(turnkey_version, profile_timestamp) 
File "/usr/lib/tklbam/hub.py", line 207, in get_new_profile 
response = self._api('GET', 'archive/timestamp/', attrs) 
File "/usr/lib/tklbam/hub.py", line 185, in _api 
return API.request(method, self.API_URL + uri, attrs, headers) 
File "/usr/lib/tklbam/hub.py", line 117, in request 
File "/usr/lib/python2.5/site-packages/pycurl_wrapper.py", line 55, in get 
return self._perform() 
File "/usr/lib/python2.5/site-packages/pycurl_wrapper.py", line 40, in _perform 
pycurl.error: (60, 'server certificate verification failed. CAfile: /etc/ssl/certs/hub-turnkeylinux-org.crt')
Any thoughts?  I couldn't find anything solutions or similar posts in the forums or google.
Jeremy Davis's picture

If you haven't already, I suggest that you use the Hub to send "feedback" (blue button on the left hand side when logged in). That should get the attention of the devs. Good luck.

David Weisbrod's picture

Per an email from Alon, I upgraded to the latest version of TKLBAM:

apt-get update
apt-get install tklbam
Running the update did update the CA.  Everything seems to be working again.
Jeremy Davis's picture

Thanks for posting back. I'll keep that in mind for future reference.

Alon Swartz's picture

The update didn't actually update the certificate, it just updated to a newer version of TKLBAM that does not have the turnkey-sslcerts dependency. We issued a security update for TKLBAM quite a while ago which should have updated all TKLBAM installations.

Add new comment