Skip Menu |

This queue is for tickets about the Finance-Bank-Postbank_de CPAN distribution.

Report information
The Basics
Id: 107202
Status: resolved
Priority: 0/
Queue: Finance-Bank-Postbank_de

People
Owner: Nobody in particular
Requestors: SREZIC [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in:
  • 0.37
  • 0.38
Fixed in: (no value)



Subject: certificate verify failed
Most tests in the test suite fail because of certificate problems: ... Error GETing https://banking.postbank.de/rai/login: Can't connect to banking.postbank.de:443 (certificate verify failed) at /tmpfs/.cpan-build/2015092015/Finance-Bank-Postbank_de-0.37-pSTSlj/b lib/lib/Finance/Bank/Postbank_de.pm line 105. # Looks like you planned 13 tests but ran 1. # Looks like your test exited with 255 just after 1. ... However, if an older version of Mozilla::CA is installed (ABH/Mozilla-CA-20130114.tar.gz), then the test suite passes. Probably a variation of the problem discussed in https://github.com/gisle/mozilla-ca/pull/5
Subject: Re: [rt.cpan.org #107202] certificate verify failed
Date: Sun, 20 Sep 2015 19:20:32 +0200
To: bug-Finance-Bank-Postbank_de [...] rt.cpan.org
From: Max Maischein <corion [...] cpan.org>
Hi Slaven, Show quoted text
> Most tests in the test suite fail because of certificate problems: > > ... > Error GETing https://banking.postbank.de/rai/login: Can't connect to banking.postbank.de:443 (certificate verify failed) at /tmpfs/.cpan-build/2015092015/Finance-Bank-Postbank_de-0.37-pSTSlj/b > lib/lib/Finance/Bank/Postbank_de.pm line 105. > # Looks like you planned 13 tests but ran 1. > # Looks like your test exited with 255 just after 1. > ... > > However, if an older version of Mozilla::CA is installed (ABH/Mozilla-CA-20130114.tar.gz), then the test suite passes. > > Probably a variation of the problem discussed in https://github.com/gisle/mozilla-ca/pull/5 >
Thanks for the report and analysis! I still use Mozilla::CA 20130114 and for me everything works. Upgrading to the newer version of OpenSSL is not really possible as I'm on Debian which still seems to distribute OpenSSL 1.0.1x . I guess the current workaround will be to pin Mozilla::CA for the time being. When the patch for LWP::Protocol::https is merged+released, the problem should resolve itself at least for systems where using the default certificate store is feasible. Thanks, -max
Fixed in between, and at least with 0.50 Thanks again for reporting this