Import fails after SSL certificate renewal

Asked by Valmantas Palikša

Import for:

Error validating server certificate for '':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname:
 - Valid: from Wed, 16 Sep 2009 10:45:58 GMT until Thu, 16 Sep 2010 10:45:58 GMT
 - Issuer: Secure Digital Certificate Signing, StartCom Ltd., IL
 - Fingerprint: eb:49:0a:1c:a8:73:b4:18:8b:89:ee:5c:4f:f6:00:f0:b6:de:0d:69
(R)eject, accept (t)emporarily or accept (p)ermanently? Traceback (most recent call last):
  File "/srv/", line 61, in ?
  File "/srv/", line 56, in main
  File "/srv/", line 396, in run
  File "/srv/", line 472, in _doImport
    foreign_tree = self.getForeignTree()
  File "/srv/", line 426, in getForeignTree
    return self.foreign_tree_store.fetch(self.FOREIGN_WORKING_TREE_PATH)
  File "/srv/", line 309, in fetch
    return self.fetchFromArchive(target_path)
  File "/srv/", line 326, in fetchFromArchive
  File "/srv/", line 73, in update
    retcode =
  File "/usr/lib/python2.4/", line 414, in call
    return Popen(*args, **kwargs).wait()
  File "/usr/lib/python2.4/", line 1019, in wait
    pid, sts = os.waitpid(, 0)
svn: PROPFIND request failed on '/svn/blueman/trunk'
svn: PROPFIND of '/svn/blueman/trunk': Server certificate verification failed: issuer is not trusted (
Import failed:
Traceback (most recent call last):
Failure: twisted.internet.error.TimeoutError: User timeout caused connection failure.

Had a similar issue with initial import. Maybe StartCom CA needs to be trusted?

Question information

English Edit question
Launchpad itself Edit question
[LEGACY] Canonical WebOps Edit question
Solved by:
Valmantas Palikša
Last query:
Last reply:
Revision history for this message
Jonathan Lange (jml) said :

It's possible that StartCom CA needs to be trusted. If you genuinely think so, it's probably best to file a bug.

Assigning this question to losas, who can actually do something about it.

Revision history for this message
Jonathan Lange (jml) said :

Still open. woot.

Revision history for this message
Tom Haddon (mthaddon) said :

I've setup the servers to trust the certificate, and kicked off another import. Hopefully that'll do the trick.

Thanks, Tom

Revision history for this message
Valmantas Palikša (walmis) said :

Thanks, should work for another year :)