Commit graph

363 commits

Author SHA1 Message Date
Mike Bonnet
f61b223723 convert from pygresql to psycopg2 2017-01-17 14:36:14 -05:00
Patrick Uiterwijk
253161f229 Allow principal and keytab in cli config
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-01-17 14:12:19 -05:00
Tomas Kopecek
0407185901 Don't require cert/serverca for kojid
Now is demanded from user to supply kojid-specific configuration or
previously expected files are used as defaults
(/etc/kojid/serverca.crt). So, user has no option to not use these and
use just system-wide certificates.

If these values are not specified, python-requests would fall back to
/etc/pki supplied files. If there is also ssl_verify=True (which is
default), everything should work correctly.
2017-01-13 10:46:41 -05:00
Tomas Kopecek
5612b1a709 Error message for missing certificates 2017-01-13 10:46:41 -05:00
Tomas Kopecek
5ba8ed9b22 Basic test for task canfail 2017-01-12 14:28:22 -05:00
Mike McLean
aed4682411 don't error when waiting on 'canfail' tasks 2017-01-12 14:28:22 -05:00
Mike McLean
316ed1f952 fix ref to task id 2017-01-12 14:28:22 -05:00
Mike McLean
3a1d13a7b5 adjustments to WaitTestTask 2017-01-12 14:28:22 -05:00
Mike McLean
00f387b226 canfail option for BaseTaskHandler.wait() 2017-01-12 14:28:22 -05:00
Mike McLean
ab99443414 Update exception syntax in rmtree() 2016-12-19 12:31:01 -05:00
Mike McLean
d4590637a1 replace old rmtree with the new one 2016-12-19 12:28:10 -05:00
Mike McLean
8f42fda97d keep going on errors 2016-12-19 12:28:10 -05:00
Mike McLean
949f23dd7b add a note 2016-12-19 12:28:10 -05:00
Mike McLean
e58850eb05 first stab at rmtree for long filenames 2016-12-19 12:28:10 -05:00
Tomas Kopecek
f4ede5339f Update http:// to https:// in code
Where https is working, code was updated to use it.
2016-12-19 11:49:11 -05:00
Mike McLean
a12f26b07d add another pattern to is_requests_cert_error() 2016-12-08 18:37:02 -05:00
Mike McLean
8d3a736637 allow setting no_ssl_verify in client config 2016-12-08 18:37:02 -05:00
Mike McLean
bc0e8c0856 avoid try..except..finally 2016-11-23 11:14:23 -05:00
Mike McLean
127d38fbef don't mask kwargs in callMethod 2016-11-23 11:05:48 -05:00
Patrick Uiterwijk
6ec1fc28e4 Restore baseurl to original if GSSAPI login didn't work
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-23 10:58:21 -05:00
Patrick Uiterwijk
fc176d7de4 Disable automatic request retries for GSSAPI authentication
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-23 10:52:41 -05:00
Patrick Uiterwijk
e85e442dcd Allow callMethod calls to specify that no retries should be attempted
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-23 10:52:39 -05:00
Patrick Uiterwijk
699865de19 Determine if a request error is caused by certificates with requests
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-23 10:52:29 -05:00
Patrick Uiterwijk
c1593411db Header values need to be strings
This has seemingly always been documented, and broken in a recent release.

Reference: https://github.com/kennethreitz/requests/issues/3477

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-22 23:26:19 +00:00
Patrick Uiterwijk
480cdfb540 Implement GSSAPI login
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-22 16:45:31 -05:00
Mike McLean
ed986086dc uncovered import exception 2016-11-22 16:41:31 -05:00
Mike McLean
f3a6bc86bc more smarts for ssl bug workaround 2016-11-22 16:41:31 -05:00
Mike McLean
20d67b5c63 ssl hack 2 2016-11-22 16:41:31 -05:00
Mike McLean
f86ca05c0e force a new session in ssl_login 2016-11-22 16:41:31 -05:00
Mike McLean
ef790857ad fix return 2016-11-22 16:41:31 -05:00
Mike McLean
3d16485c6f grab_session_options function 2016-11-22 16:41:31 -05:00
Mike McLean
33e1bdee97 force https when using ssl auth 2016-11-22 16:41:31 -05:00
Mike McLean
7b33327030 avoid tickling race condition with common keep alive timeout setting
The default KeepAliveTimeout in Apache httpd 2.4 is 5 seconds. Sleeping for that
same time and then resuming calls can tickle a race condition.

The previous commit /should/ catch that now, but there's no sense hitting that
error so often.

See also: https://github.com/mikem23/keepalive-race
2016-11-22 16:41:31 -05:00
Mike McLean
0a5650cf28 update connection error retry code
see also: https://github.com/mikem23/keepalive-race
2016-11-22 16:41:31 -05:00
Mike McLean
a6440820a6 honor verify in compatrequests 2016-11-22 16:41:31 -05:00
Mike McLean
1caa748a6d avoid with statement for now 2016-11-22 16:41:31 -05:00
Mike McLean
4e872d67b7 suppress warnings in requests 2016-11-22 16:41:31 -05:00
Mike McLean
c1e91486bd no_ssl_verify session opt 2016-11-22 16:41:31 -05:00
Mike McLean
2ac8d7a701 only use default certs if they exist 2016-11-22 16:41:31 -05:00
Mike McLean
be7c97eacd move cert date directly into client session opts 2016-11-22 16:41:31 -05:00
Mike McLean
f8c58e9f64 fix post handler 2016-11-22 16:41:31 -05:00
Mike McLean
b13994082a use compatrequests if requests no present 2016-11-22 16:41:31 -05:00
Mike McLean
c3556dee43 add config for use_old_ssl. make new session on errors 2016-11-22 16:41:31 -05:00
Mike McLean
17e79df68b use correct port 2016-11-22 16:41:31 -05:00
Mike McLean
33da7cf84d trying to fix auth 2016-11-22 16:41:31 -05:00
Mike McLean
6b02479210 compat mode works anonymously 2016-11-22 16:41:31 -05:00
Mike McLean
45dd3bf187 working? 2016-11-22 16:41:31 -05:00
Mike McLean
a211a56401 More work on compatrequests 2016-11-22 16:41:31 -05:00
Mike McLean
ce768fc59e stub for compatrequests 2016-11-22 16:41:31 -05:00
Mike McLean
6f08b8d064 fix handler url for upload 2016-11-22 16:41:31 -05:00