particle-os/debian-koji
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2372 commits 1 branch 0 tags 12 MiB
Commit graph

235 commits

Author SHA1 Message Date
Patrick Uiterwijk
253161f229 Allow principal and keytab in cli config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-01-17 14:12:19 -05:00
Tomas Kopecek
0407185901 Don't require cert/serverca for kojid 
Now is demanded from user to supply kojid-specific configuration or
previously expected files are used as defaults
(/etc/kojid/serverca.crt). So, user has no option to not use these and
use just system-wide certificates.

If these values are not specified, python-requests would fall back to
/etc/pki supplied files. If there is also ssl_verify=True (which is
default), everything should work correctly.
 2017-01-13 10:46:41 -05:00
Tomas Kopecek
5612b1a709 Error message for missing certificates 2017-01-13 10:46:41 -05:00
Mike McLean
a12f26b07d add another pattern to is_requests_cert_error() 2016-12-08 18:37:02 -05:00
Mike McLean
8d3a736637 allow setting no_ssl_verify in client config 2016-12-08 18:37:02 -05:00
Mike McLean
bc0e8c0856 avoid try..except..finally 2016-11-23 11:14:23 -05:00
Mike McLean
127d38fbef don't mask kwargs in callMethod 2016-11-23 11:05:48 -05:00
Patrick Uiterwijk
6ec1fc28e4 Restore baseurl to original if GSSAPI login didn't work 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 10:58:21 -05:00
Patrick Uiterwijk
fc176d7de4 Disable automatic request retries for GSSAPI authentication 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 10:52:41 -05:00
Patrick Uiterwijk
e85e442dcd Allow callMethod calls to specify that no retries should be attempted 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 10:52:39 -05:00
Patrick Uiterwijk
699865de19 Determine if a request error is caused by certificates with requests 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 10:52:29 -05:00
Patrick Uiterwijk
c1593411db Header values need to be strings 
This has seemingly always been documented, and broken in a recent release.

Reference: https://github.com/kennethreitz/requests/issues/3477

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-22 23:26:19 +00:00
Patrick Uiterwijk
480cdfb540 Implement GSSAPI login 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-22 16:45:31 -05:00
Mike McLean
f3a6bc86bc more smarts for ssl bug workaround 2016-11-22 16:41:31 -05:00
Mike McLean
20d67b5c63 ssl hack 2 2016-11-22 16:41:31 -05:00
Mike McLean
f86ca05c0e force a new session in ssl_login 2016-11-22 16:41:31 -05:00
Mike McLean
ef790857ad fix return 2016-11-22 16:41:31 -05:00
Mike McLean
3d16485c6f grab_session_options function 2016-11-22 16:41:31 -05:00
Mike McLean
33e1bdee97 force https when using ssl auth 2016-11-22 16:41:31 -05:00
Mike McLean
7b33327030 avoid tickling race condition with common keep alive timeout setting 
The default KeepAliveTimeout in Apache httpd 2.4 is 5 seconds. Sleeping for that
same time and then resuming calls can tickle a race condition.

The previous commit /should/ catch that now, but there's no sense hitting that
error so often.

See also: https://github.com/mikem23/keepalive-race
 2016-11-22 16:41:31 -05:00
Mike McLean
0a5650cf28 update connection error retry code 
see also: https://github.com/mikem23/keepalive-race
 2016-11-22 16:41:31 -05:00
Mike McLean
1caa748a6d avoid with statement for now 2016-11-22 16:41:31 -05:00
Mike McLean
4e872d67b7 suppress warnings in requests 2016-11-22 16:41:31 -05:00
Mike McLean
c1e91486bd no_ssl_verify session opt 2016-11-22 16:41:31 -05:00
Mike McLean
2ac8d7a701 only use default certs if they exist 2016-11-22 16:41:31 -05:00
Mike McLean
be7c97eacd move cert date directly into client session opts 2016-11-22 16:41:31 -05:00
Mike McLean
b13994082a use compatrequests if requests no present 2016-11-22 16:41:31 -05:00
Mike McLean
c3556dee43 add config for use_old_ssl. make new session on errors 2016-11-22 16:41:31 -05:00
Mike McLean
6b02479210 compat mode works anonymously 2016-11-22 16:41:31 -05:00
Mike McLean
6f08b8d064 fix handler url for upload 2016-11-22 16:41:31 -05:00
Mike McLean
aed2a1a054 honor debug_xmlrpc 2016-11-22 16:41:31 -05:00
Mike McLean
9af4c393f5 move is_cert_error(); require python-requests 2016-11-22 16:41:31 -05:00
Mike McLean
37bd3c460b ssl auth working 2016-11-22 16:41:31 -05:00
Mike McLean
fc8a8c6582 parse host from baseurl in _serverPrincipal() 
krb auth working now
 2016-11-22 16:41:31 -05:00
Mike McLean
eff7bad45a pull requests bits from py3 work 
auth not working
untrusted https not working
 2016-11-22 16:41:31 -05:00
Mike McLean
a1c8808544 ImportErrors are uncovered 2016-10-25 17:16:12 -04:00
Tomas Kopecek
78d34d7b9d ignore optional deps for rpm < 4.12 2016-10-13 00:29:39 -04:00
Tomas Kopecek
51eca7346e getRPMDeps exposes additional deps 
Adding Conflicts, Suggests, Enhances, Supplements and Recommend header fields
in addition to original Requires, Conflicts, Obsoletes and Provides

relates: https://pagure.io/koji/issue/142
 2016-10-13 00:29:39 -04:00
Mike McLean
30226706e1 fix cut and paste errors 2016-10-06 17:40:51 -04:00
Mike McLean
b481229d8f assert basic nvr sanity for cg imports 2016-10-06 17:40:51 -04:00
Tomas Kopecek
c37effcbd7 remove unused variables/methods 2016-10-04 15:48:54 +02:00
Tomas Kopecek
921258749a removed unused imports 2016-10-04 15:48:54 +02:00
Mike McLean
15f483feea handle btypes in import_archive 2016-09-28 18:20:09 -04:00
Mike McLean
2f412fbcfb support untyped build archive imports 2016-09-28 18:20:09 -04:00
Mohan Boddu
dd82e9cea2 Remove all bad-whitespaces 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2016-08-29 14:26:32 -04:00
Mike McLean
125df6771b use correct temporary dirs in openRemoteFile and mergerepos 2016-08-10 12:06:30 -04:00
Mike McLean
175f047288 s/LiveMEDIA/LiveMedia 2016-05-16 14:02:08 -04:00
Mike McLean
c1d309e78c fixing up cli task display 2016-05-16 14:02:07 -04:00
Mike McLean
e562402709 [*] don't obscure traceback in retry code 2016-05-16 14:02:06 -04:00
Jon Disnard
41fa543e09 koji: Add LMC error handler, and misc glue. 
Signed-off-by: Jon Disnard <jdisnard@redhat.com>
 2016-05-16 14:02:05 -04:00