Upgrade to 4.3-3 Fails

This is the output from the console. This server is running Open-Xchange

root@ucs-xxx:/var/log/univention# univention-upgrade

Starting univention-upgrade. Current UCS version is 4.3-2 errata376

Checking for local repository: none
Checking for package updates: none
Checking for app updates: none
Checking for release updates: found: UCS 4.3-3
Do you want to update to 4.3-3 [Y|n]? Y

Starting update to UCS version 4.3-3
Traceback (most recent call last):
File “/usr/share/univention-updater/univention-updater”, line 606, in
main()
File “/usr/share/univention-updater/univention-updater”, line 524, in main
add_temporary_sources_list(updater.release_update_temporary_sources_list(nextversion))
File “/usr/lib/pymodules/python2.7/univention/updater/tools.py”, line 944, in release_update_temporary_sources_l ist
repos = self.get_component_repositories(component, [mmp_version], False)
File “/usr/lib/pymodules/python2.7/univention/updater/tools.py”, line 1593, in get_component_repositories
for server, ver in self._iterate_component_repositories([component], version, version, archs, for_mirror_list= for_mirror_list):
File “/usr/lib/pymodules/python2.7/univention/updater/tools.py”, line 1330, in _iterate_component_repositories
server = self._get_component_server(component, for_mirror_list=for_mirror_list)
File “/usr/lib/pymodules/python2.7/univention/updater/tools.py”, line 1511, in _get_component_server
assert testserver.access(None, ‘’)
File “/usr/lib/pymodules/python2.7/univention/updater/tools.py”, line 527, in access
res = UCSHttpServer.opener.open(req, timeout=self.timeout)
File “/usr/lib/python2.7/urllib2.py”, line 429, in open
response = self._open(req, data)
File “/usr/lib/python2.7/urllib2.py”, line 447, in _open
‘_open’, req)
File “/usr/lib/python2.7/urllib2.py”, line 407, in _call_chain
result = func(args)
File “/usr/lib/python2.7/urllib2.py”, line 1241, in https_open
context=self._context)
File “/usr/lib/python2.7/urllib2.py”, line 1195, in do_open
h.request(req.get_method(), req.get_selector(), req.data, headers)
File “/usr/lib/python2.7/httplib.py”, line 1042, in request
self._send_request(method, url, body, headers)
File “/usr/lib/python2.7/httplib.py”, line 1082, in _send_request
self.endheaders(body)
File “/usr/lib/python2.7/httplib.py”, line 1038, in endheaders
self._send_output(message_body)
File “/usr/lib/python2.7/httplib.py”, line 882, in _send_output
self.send(msg)
File “/usr/lib/python2.7/httplib.py”, line 844, in send
self.connect()
File “/usr/lib/python2.7/httplib.py”, line 1263, in connect
server_hostname=server_hostname)
File “/usr/lib/python2.7/ssl.py”, line 363, in wrap_socket
_context=self)
File “/usr/lib/python2.7/ssl.py”, line 611, in init
self.do_handshake()
File “/usr/lib/python2.7/ssl.py”, line 848, in do_handshake
match_hostname(self.getpeercert(), self.server_hostname)
File “/usr/lib/python2.7/ssl.py”, line 286, in match_hostname
% (hostname, dnsnames[0]))
ssl.CertificateError: hostname ‘software.open-xchange.com’ doesn’t match '
.it.open-xchange.com’
ERROR: update failed. Please check /var/log/univention/updater.log

From /var/log/univention/updater.log:

Starting univention-upgrade. Current UCS version is 4.3-2 errata376

Checking for local repository: none
Checking for package updates: none
Checking for app updates: none
Checking for release updates: found: UCS 4.3-3
Starting update to UCS version 4.3-3 at Tue Dec 25 20:07:01 2018…
Starting update to UCS version 4.3-3
25.12.18 20:07:02.393 DEBUG_INIT
**** Starting univention-updater with parameter=[’/usr/share/univention-updater/univention-updater’, ‘net’, ‘–updateto’, ‘4.3-3’, ‘–silent’]
Version=4.3
Patchlevel=2
starting net mode
—>DBG:update_available(mode=net, cdrom_mount_point=/media/cdrom, iso=None)
Checking network repository
Update to = 4.3-3

Starting univention-upgrade. Current UCS version is 4.3-2 errata376

exitcode of univention-updater: 1
ERROR: update failed. Please check /var/log/univention/updater.log

An invalid SSL certificate is used by “software.open-xchange.com”, so the update aborts. The used certificate is only valid for *.it.open-xchange.com.
Nothing Univention can fix. And looking at the code of the updater there does not seem to be a config option to disable SSL verification, so it seems like you have to wait until OpenXchange fixes their certificate.

Bye, bytemine GmbH

Seems like Open-Xchange fixed the SSL issue, the certificate is now valid and an upgrade should be possible again.

Bye, bytemine

Thanks,
The uppgrade works now.

Mastodon