Re: [Duplicity-talk] WebDAV SSL certificate verify failed

[edgar . soldin]

On 28.01.2016 12:32, Richard McGraw wrote:
> On Thu, 28 Jan 2016 11:57:27 +0100
> address@hidden wrote:
> 
>> On 28.01.2016 11:35, Richard McGraw wrote:
>>> Hello,
>>>
>>> At least a week ago, I started to get this error with a certain
>>> webdav provider:
>>>
>>> BackendException: SSL failed: [Errno 1] _ssl.c:510:
>>> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
>>> verify failed
>>>
>>> With --ssl-no-check-certificate, this error does not occur.
>>>
>>> The service is free-hidrive, the URL is like
>>> webdavs://USER.webdav.hidrive.strato.com/users/USER/etc
>>>
>>> I tried the --ssl-cacert-file option with a file containing (if I'm
>>> not mistaken) the chain of issuers and the certificate
>>> for *.webdav.hidrive.strato.com, but I got the same error.
>>>
>>> Any ideas ?
>>
>> not instantly. did you try to use the latest curl pem as described in
>> the manpage? http://duplicity.nongnu.org/duplicity.1.html#sect22
>>
>> ..ede
>>
> Updated /etc/duplicity/cacert.pem a few days ago, the timestamp is
> ## Certificate data from Mozilla as of: Wed Jan 20 04:12:04 2016
> 

is the error a bit more detailed when run w/ -v9 (max verbosity) as to why the 
verify fails?

..ede