Project

General

Profile

Actions
Copy link

Documentation #4111

closed

installing RPMs - documented install release key command fails

Added by Ken Franklin about 11 years ago. Updated about 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Sandon Van Ness
Category:
-
Target version:
-
% Done:

0%

Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

attempting a bobtail rpm installation for centos got the following when executing the suggested command

[qauser@centosvm1 yum.repos.d]$ sudo rpm --import 'https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc'
curl: (35) SSL connect error
error: https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc: import read failed(2).

Actions
Copy link
 #1

Updated by Anonymous about 11 years ago

It may need to point to the github repository instead of the ceph mirror. I found that worked ok with github:

[ubuntu@gitbuilder-centos6-amd64 ~]$ sudo rpm --import https://raw.github.com/ceph/ceph/master/keys/release.asc
[ubuntu@gitbuilder-centos6-amd64 ~]$ rpm -qa gpg-pubkey*
gpg-pubkey-0608b895-4bd22942
gpg-pubkey-c105b9de-4e0fd3a3
gpg-pubkey-03c3951a-51149b56
gpg-pubkey-17ed316d-4fb96ee8

Using curl and wget I was unable to download the plain text key file from the ceph mirror. Works fine on github for the release key.

Actions
Copy link
 #2

Updated by Anonymous about 11 years ago

Documentation is correct. There is some sort of ssl protocol error with libcurl on centos6. Some of the other rpm distros work fine.

It is likely this bug: http://bugs.centos.org/view.php?id=5620

Actions
Copy link
 #3

Updated by Sage Weil about 11 years ago

  • Translation missing: en.field_position set to 1
Actions
Copy link
 #4

Updated by Sandon Van Ness about 11 years ago

  • Status changed from New to Resolved
  • Assignee set to Sandon Van Ness

Fixed. DH has it set so it only allows RC4-SHA:

SSLCipherSuite RC4-SHA

I added a custom parameter to the https apache daemon running https on ceph.com to over-ride this to:

SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5

And after pushing a new apache config to the machine it now works (first curl is before, second is after):

[ubuntu@centos01 ~]$ curl https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc
curl: (35) SSL connect error

[ubuntu@centos01 ~]$ curl https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd&quot;>
<html xmlns="http://www.w3.org/1999/xhtml&quot; xml:lang="en-US" lang="en-US">

----------------SNIP---------------

Actions
Copy link

Also available in: Atom PDF