Package: yum
Version: 3.4.3-2
Severity: normal
Dear Maintainer,
*** Please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these lines ***
I was experimenting with building fedora chroots and under certain
circumstances yum exits with:
File "/usr/lib/pymodules/python2.7/urlgrabber/grabber.py", line 1193, in
_set_opts
self.curl_obj.setopt(pycurl.SSL_VERIFYHOST, opts.ssl_verify_host)
pycurl.error: (43, 'CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!')
I was using the command:
yum --releasever=19 --nogpg -c rootfs/etc/yum.repos.d/fedora.repo
--disableplugin='*' --disablerepo='*' --enablerepo=fedora --installroot
/tmp/rootfs/ install bash vim-minimal procps-ng yum passwd fedora-release
systemd
I'll attach the fedora.repo file I was using.
I found this forum post which claims that CURLOPT_SSL_VERIFYHOST needs to be 2.
http://devot-ee.com/add-ons/support/simple-s3-uploader/viewthread/9731
I had a simple patch which got around the issue for me.
In addition to the packages picked up by report bug I think the following are
also relevant:
python-pycurl 7.19.0-7
libcurl3-gnutls: 7.32.0-1
Diane Trout
-- System Information:
Debian Release: jessie/sid
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable'), (110,
'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.8-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages yum depends on:
ii python 2.7.5-4
ii python-libxml2 2.9.1+dfsg1-3
ii python-rpm 4.11.1-2
ii python-sqlite 1.0.1-9
ii python-sqlitecachec 1.1.4-1
ii python-urlgrabber 3.9.1-4
ii rpm 4.11.1-2
yum recommends no packages.
yum suggests no packages.
-- no debconf information
--- /tmp/yumRepo.py 2013-09-08 14:17:43.692054028 -0700
+++ /usr/lib/python2.7/dist-packages/yum/yumRepo.py 2013-06-26 22:07:25.000000000 -0700
@@ -504,9 +504,9 @@
'proxies': self.proxy_dict,
'timeout': self.timeout,
'http_headers': tuple(self.__headersListFromDict(cache=cache)),
'ssl_verify_peer': self.sslverify,
- 'ssl_verify_host': 2 if self.sslverify else 0,
+ 'ssl_verify_host': self.sslverify,
'ssl_ca_cert': self.sslcacert,
'ssl_cert': self.sslclientcert,
'ssl_key': self.sslclientkey,
'user_agent': default_grabber.opts.user_agent,
[fedora]
name=Fedora $releasever - $basearch
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-$releasever&arch=$basearch
enabled=1
#metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch
[fedora-debuginfo]
name=Fedora $releasever - $basearch - Debug
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/$basearch/debug/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-debug-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch
[fedora-source]
name=Fedora $releasever - Source
failovermethod=priority
#baseurl=http://download.fedoraproject.org/pub/fedora/linux/releases/$releasever/Everything/source/SRPMS/
mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=fedora-source-$releasever&arch=$basearch
enabled=0
metadata_expire=7d
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$basearch
