title: Cannot get a Koji Build system work
body: <p>I setup the <strong>koji</strong> build environment in a <strong>Centos6 Machine server</strong> as suggested by the documentation (<a href="http://fedoraproject.org/wiki/Koji/ServerHowTo" rel="nofollow">http://fedoraproject.org/wiki/Koji/ServerHowTo</a>).
  I could properly access the Koji Web using http. Yet I am facing an <strong>SSL certificate trouble</strong> when switching to https:</p>
  
  <p>Client Browser error produced by Mozilla FireFOx:</p>
  
  <pre><code>SSL peer was unable to negotiate an acceptable set of security parameters. (Error code: ssl_error_handshake_failure_alert)
  </code></pre>
  
  <ul>
  <li><p>Having enabled two admin users, I get a Koji secific error when running the command:</p>
  
  <p>su kojiman; koji call getLoggedInUser</p></li>
  </ul>
  
  <p>Errors under : kojiman:</p>
  
  <pre><code>Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
  </code></pre>
  
  #
  
  <p>su kojiadmin; koji call getLoggedInUser
  Errors under: kojiadmin</p>
  
  <pre><code>Error: [('SSL routines', 'SSL3_READ_BYTES', 'sslv3 alert bad certificate'), ('SSL routines', 'SSL3_WRITE_BYTES', 'ssl handshake failure')]
  </code></pre>
  
  <hr>
  
  <p>While in httpd ssl log I have the following:</p>
  
  ############################"
  
  <p>SSL erros:</p>
  
  <pre><code>[Wed Feb 05 18:37:28 2014] [error] [client 46.21.193.155] Certificate Verification: Error (19): self signed certificate in certificate chain
  [Wed Feb 05 18:44:06 2014] [warn] RSA server certificate CommonName (CN) `kojihub' does NOT match server name!?
  [Wed Feb 05 18:44:06 2014] [warn] RSA server certificate CommonName (CN) `kojihub' does NOT match server name!?
  </code></pre>
  
  <ul>
  <li><p>When I test the certificate I get with openSSL: </p>
  
  <p>openssl s_client -connect localhost:443 -tls1 -CAfile /etc/pki/koji/kojihub.pem</p></li>
  </ul>
  
  <p>I indeed get:</p>
  
  <pre><code>verify error:num=20:unable to get local issuer certificate
  verify error:num=27:certificate not trusted
  verify error:num=21:unable to verify the first certificate
  
  verify return:1
  139736479307592:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1256:SSL alert number 40
  139736479307592:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:596:
  Verify return code: 21 (unable to verify the first certificate)
  </code></pre>
  
  <p>Any help would be appreciated!</p>