rpkg

#195 Doesn't honour the serverca or no_ssl_verify config file options for koji sessions
Closed: Fixed Opened by berrange.

Closed: Fixed
Reopen Issue

Koji supports two config options 'serverca' and 'no_ssl_verify' to control how it validates the koji server certificate. This can be overriden in $HOME/.koji/config, but when running via an rpkg based app, these variables are not honoured. The create_koji_session_opts() has not whitelisted them, so they get discarded, causing koji to apply its default behaviour. THis results in SSL verification failure unless the cert is in your global trust store

Patch to fix the config file handling

0001-Propagate-serverca-no_ssl_verify-vars-to-Koji-sessio.patch

I believe this patch also fixes this problem.
0001-Use-koji.grab_session_options-rather-than-opencoding.patch

Could someone review/merge this?

Oh, or maybe this should be done through a push request ?

Opening a pull request would indeed be helpful. Also, can you please add a sign-off (git commit -s) on the commit? Otherwise the patch looks good.

Opened https://pagure.io/rpkg/pull-request/245

Any update on getting this fix merged... ?

Need to wait for a Koji release that includes https://pagure.io/koji/pull-request/664

https://pagure.io/koji/pull-request/664 has been merged but not released. Move this issue to NEXT.

Metadata Update from @cqi:
- Issue set to the milestone: NEXT

https://pagure.io/koji/pull-request/664 is included in next koji release 1.15. See https://pagure.io/koji/pull-request/746

Metadata Update from @cqi:
- Issue close_status updated to: Fixed
- Issue set to the milestone: 1.53 (was: NEXT)
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.