Forum archive
TKLBAM pvcurl.error 'server certificate verification failed' A TKL Cert Issue?
My LAMP has been using tklbam for quite some time now and it stopped working on 4-4-2012. I ran a manual backup from Webmin and it failed with a "server certificate verification failed" error.
> tklbam-backup
Traceback (most recent call last):
File "/usr/bin/tklbam-backup", line 266, in <module>
main()
File "/usr/bin/tklbam-backup", line 195, in main
conf.profile = get_profile(hb)
File "/usr/bin/tklbam-backup", line 122, in get_profile
new_profile = hb.get_new_profile(turnkey_version, profile_timestamp)
File "/usr/lib/tklbam/hub.py", line 207, in get_new_profile
response = self._api('GET', 'archive/timestamp/', attrs)
File "/usr/lib/tklbam/hub.py", line 185, in _api
return API.request(method, self.API_URL + uri, attrs, headers)
File "/usr/lib/tklbam/hub.py", line 117, in request
func(attrs)
File "/usr/lib/python2.5/site-packages/pycurl_wrapper.py", line 55, in get
return self._perform()
File "/usr/lib/python2.5/site-packages/pycurl_wrapper.py", line 40, in _perform
self.c.perform()
pycurl.error: (60, 'server certificate verification failed. CAfile: /etc/ssl/certs/hub-turnkeylinux-org.crt')Any thoughts? I couldn't find anything solutions or similar posts in the forums or google.
Thanks!
Replies (4)
That's certainly a new one to me
Reply 1Fixed!
Reply 2Per an email from Alon, I upgraded to the latest version of TKLBAM:
apt-get update
apt-get install tklbam
Running the update did update the CA. Everything seems to be working again.
Nice.
Reply 3Thanks for posting back. I'll keep that in mind for future reference.
Clarifications
Reply 4The update didn't actually update the certificate, it just updated to a newer version of TKLBAM that does not have the turnkey-sslcerts dependency. We issued a security update for TKLBAM quite a while ago which should have updated all TKLBAM installations.
If you haven't already, I suggest that you use the Hub to send "feedback" (blue button on the left hand side when logged in). That should get the attention of the devs. Good luck.