Push error with ssl [changegroup.scm]

[Adeptus Astartes]

I configured ssl for scm by this manual:

https://bitbucket.org/sdorra/scm-manager/wiki/scm-server-ssl

After this i can't pushing. I have this error in my TortoiseHG
remote: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)>transaction abort!

I found some error in log-file:

[cgi-pool-0] WARN sonia.scm.web.cgi.DefaultCGIExecutor - abort: pretxnchangegroup.scm hook failed

When i commited line "changegroup.scm = python:scmhooks.callback" in my repositories .hgrc - i can push. But after that my scm-notifi-pluging stop notifi...

Somebody can help me with this error?

[Adeptus Astartes]

some logs:

scm-server.out:

2016-03-01 23:03:52.758 [main] INFO  sonia.scm.boot.BootstrapListener - destroy scm context listener

2016-03-01 23:03:52.760 [main] INFO  sonia.scm.cache.GuavaCacheManager - close guava cache manager

2016-03-01 23:03:52.760 [main] INFO  sonia.scm.boot.BootstrapListener - close plugin class loader

2016-03-01 23:04:18.754 [main] INFO  sonia.scm.boot.BootstrapListener - start scm-manager 1.46 in stage: PRODUCTION

2016-03-01 23:04:19.149 [main] INFO  sonia.scm.boot.BootstrapUtil - using parent-first as plugin classloading strategy

2016-03-01 23:04:19.151 [main] INFO  sonia.scm.boot.BootstrapListener - try to use ScmBootstrapClassLoader

2016-03-01 23:04:19.154 [main] INFO  sonia.scm.boot.BootstrapListener - initialize scm context listener

2016-03-01 23:04:19.219 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load core plugin /opt/scm-server/work/webapp/WEB-INF/lib/scm-svn-plugin-1.46.jar

2016-03-01 23:04:19.312 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load core plugin /opt/scm-server/work/webapp/WEB-INF/lib/scm-hg-plugin-1.46.jar

2016-03-01 23:04:19.322 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load core plugin /opt/scm-server/work/webapp/WEB-INF/lib/scm-git-plugin-1.46.jar

2016-03-01 23:04:19.330 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load  plugin /root/.scm/plugins/sonia/scm/plugins/scm-webconfig-plugin/1.0/scm-webconfig-plugin-1.0.jar

2016-03-01 23:04:19.363 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load  plugin /root/.scm/plugins/sonia/scm/plugins/scm-auth-ldap-plugin/1.21/scm-auth-ldap-plugin-1.21.jar

2016-03-01 23:04:19.378 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load  plugin /root/.scm/plugins/sonia/scm/plugins/scm-mail-plugin/1.5/scm-mail-plugin-1.5.jar

2016-03-01 23:04:19.385 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - load  plugin /root/.scm/plugins/sonia/scm/plugins/scm-notify-plugin/1.5/scm-notify-plugin-1.5.jar

2016-03-01 23:04:20.281 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class sonia.scm.web.GitServletModule

2016-03-01 23:04:20.282 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class sonia.scm.notify.NotifyModule

2016-03-01 23:04:20.282 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class sonia.scm.web.SvnServletModule

2016-03-01 23:04:20.282 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class sonia.scm.web.HgServletModule

2016-03-01 23:04:20.282 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class sonia.scm.mail.internal.MailModule

2016-03-01 23:04:20.283 [main] INFO  sonia.scm.plugin.DefaultPluginLoader - add module class de.corux.scm.plugins.webconfig.WebConfigModule

2016-03-01 23:04:20.573 [main] INFO  sonia.scm.util.ScmConfigurationUtil - load ScmConfiguration from file /root/.scm/config/config.xml

2016-03-01 23:04:21.255 [main] INFO  sonia.scm.event.ScmEventBus - use sonia.scm.event.GuavaScmEventBus as event bus implementation

2016-03-01 23:04:21.268 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind 24 extensions to 26 extension points

2016-03-01 23:04:21.268 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.web.security.AuthenticationListener

2016-03-01 23:04:21.281 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.RepositoryManagerDecoratorFactory

2016-03-01 23:04:21.285 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.group.GroupManagerDecoratorFactory

2016-03-01 23:04:21.286 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.net.ahc.ContentTransformer

2016-03-01 23:04:21.286 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.BlameLinePreProcessorFactory

2016-03-01 23:04:21.287 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.web.UserAgentProvider

2016-03-01 23:04:21.291 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.SvnUserAgentProvider to multibinder of sonia.scm.web.UserAgentProvider

2016-03-01 23:04:21.292 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.GitUserAgentProvider to multibinder of sonia.scm.web.UserAgentProvider

2016-03-01 23:04:21.292 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.BrowserUserAgentProvider to multibinder of sonia.scm.web.UserAgentProvider

2016-03-01 23:04:21.293 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.HgUserAgentProvider to multibinder of sonia.scm.web.UserAgentProvider

2016-03-01 23:04:21.293 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.BlameLinePreProcessor

2016-03-01 23:04:21.298 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.FileObjectPreProcessorFactory

2016-03-01 23:04:21.298 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.FileObjectPreProcessor

2016-03-01 23:04:21.298 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.RepositoryHook

2016-03-01 23:04:21.299 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.notify.NotifyRepositoryHook to multibinder of sonia.scm.repository.RepositoryHook

2016-03-01 23:04:21.299 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for javax.servlet.ServletContextListener

2016-03-01 23:04:21.299 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.notify.migration.MigrationContextListener to multibinder of javax.servlet.ServletContextListener

2016-03-01 23:04:21.299 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.GitContextListener to multibinder of javax.servlet.ServletContextListener

2016-03-01 23:04:21.300 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.group.GroupListener

2016-03-01 23:04:21.300 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.RepositoryHandler

2016-03-01 23:04:21.300 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.GitRepositoryHandler to multibinder of sonia.scm.repository.RepositoryHandler

2016-03-01 23:04:21.300 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.HgRepositoryHandler to multibinder of sonia.scm.repository.RepositoryHandler

2016-03-01 23:04:21.300 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.SvnRepositoryHandler to multibinder of sonia.scm.repository.RepositoryHandler

2016-03-01 23:04:21.301 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.HealthCheck

2016-03-01 23:04:21.301 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.DBFormatHealthCheck to multibinder of sonia.scm.repository.HealthCheck

2016-03-01 23:04:21.309 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.HgHealthCheck to multibinder of sonia.scm.repository.HealthCheck

2016-03-01 23:04:21.310 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.GitHealthCheck to multibinder of sonia.scm.repository.HealthCheck

2016-03-01 23:04:21.310 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.ChangesetPreProcessor

2016-03-01 23:04:21.311 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.RepositoryRequestListener

2016-03-01 23:04:21.312 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.ChangesetPreProcessorFactory

2016-03-01 23:04:21.313 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.user.UserManagerDecoratorFactory

2016-03-01 23:04:21.314 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.spi.RepositoryServiceResolver

2016-03-01 23:04:21.315 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.spi.HgRepositoryServiceResolver to multibinder of sonia.scm.repository.spi.RepositoryServiceResolver

2016-03-01 23:04:21.315 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.spi.GitRepositoryServiceResolver to multibinder of sonia.scm.repository.spi.RepositoryServiceResolver

2016-03-01 23:04:21.315 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.repository.spi.SvnRepositoryServiceResolver to multibinder of sonia.scm.repository.spi.RepositoryServiceResolver

2016-03-01 23:04:21.316 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.web.security.AuthenticationHandler

2016-03-01 23:04:21.316 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.web.security.DefaultAuthenticationHandler to multibinder of sonia.scm.web.security.AuthenticationHandler

2016-03-01 23:04:21.316 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - bind sonia.scm.auth.ldap.LDAPAuthenticationHandler to multibinder of sonia.scm.web.security.AuthenticationHandler

2016-03-01 23:04:21.317 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for javax.servlet.http.HttpSessionListener

2016-03-01 23:04:21.319 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.resources.ResourceHandler

2016-03-01 23:04:21.320 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.user.UserListener

2016-03-01 23:04:21.320 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.repository.RepositoryListener

2016-03-01 23:04:21.321 [main] INFO  sonia.scm.plugin.ext.ExtensionBinder - create multibinder for sonia.scm.web.filter.AutoLoginModule

2016-03-01 23:04:21.393 [main] INFO  sonia.scm.ScmServletModule - configure jersey with package path: sonia.scm;de.corux.scm.plugins.webconfig

2016-03-01 23:04:22.155 [main] WARN  sonia.scm.cache.GuavaCacheConfigurationReader - could not find manual configuration at /root/.scm/ext/gcache.xml

2016-03-01 23:04:22.606 [main] INFO  sonia.scm.repository.DefaultRepositoryManager - added RepositoryHandler class sonia.scm.repository.GitRepositoryHandler for type Type{name=git, displayName=Git}

2016-03-01 23:04:22.607 [main] INFO  sonia.scm.repository.DefaultRepositoryManager - added RepositoryHandler class sonia.scm.repository.HgRepositoryHandler for type Type{name=hg, displayName=Mercurial}

2016-03-01 23:04:22.610 [main] INFO  sonia.scm.repository.DefaultRepositoryManager - added RepositoryHandler class sonia.scm.repository.SvnRepositoryHandler for type Type{name=svn, displayName=Subversion}

2016-03-01 23:04:23.093 [main] INFO  sonia.scm.EagerSingletonModule - initialize eager singleton sonia.scm.repository.LastModifiedUpdateListener

2016-03-01 23:04:23.166 [main] INFO  sonia.scm.web.security.DefaultAdministrationContext - execute action sonia.scm.repository.HealthCheckContextListener$HealthCheckStartupAction in administration context

2016-03-01 23:04:23.193 [main] INFO  sonia.scm.repository.HealthChecker - start health check for repository apus-flight-software

2016-03-01 23:04:23.217 [main] INFO  sonia.scm.repository.HealthChecker - repository apus-flight-software is healthy

2016-03-01 23:04:23.217 [main] INFO  sonia.scm.repository.HealthChecker - start health check for repository ttt

2016-03-01 23:04:23.221 [main] INFO  sonia.scm.repository.HealthChecker - repository ttt is healthy

2016-03-01 23:04:23.225 [main] INFO  sonia.scm.boot.BootstrapFilter - loading GuiceFilter with ScmBootstrapClassLoader

2016-03-01 23:09:58.118 [qtp791885625-18] INFO  sonia.scm.repository.HgHookManager - use https://repo.local/scm/hook/hg/ for mercurial hooks

2016-03-01 23:10:00.667 [cgi-pool-0] WARN  sonia.scm.web.cgi.DefaultCGIExecutor - abort: pretxnchangegroup.scm hook failed

scm-server.err:

2016-03-01 23:04:24.722:INFO:oejw.StandardDescriptorProcessor:NO JSP Support for /, did not find org.apache.jasper.servlet.JspServlet

2016-03-01 23:04:24.729:INFO:oejsh.ContextHandler:started o.e.j.w.WebAppContext{/,[file:/opt/scm-server/var/webapp/docroot/]}

2016-03-01 23:04:24.884:INFO:oejs.AbstractConnector:Started SelectChann...@0.0.0.0:8080

2016-03-01 23:04:25.090:INFO:oejus.SslContextFactory:Enabled Protocols [TLSv1, TLSv1.1, TLSv1.2] of [SSLv2Hello, SSLv3, TLSv1, TLSv1.1, TLSv1.2]

2016-03-01 23:04:25.110:INFO:oejs.AbstractConnector:Started SslSelectCha...@0.0.0.0:443

2016-03-01 23:10:00.653:WARN:oeji.nio:javax.net.ssl.SSLException: Received fatal alert: unknown_ca

[Adeptus Astartes]

Heh... I found how to fix my error

This is because i use self-signed certificate and Python 2.7.10.
See more https://www.python.org/dev/peps/pep-0476/

For fix change in ssl.py line

_create_default_https_context = create_default_context

to

_create_default_https_context = _create_unverified_context

After this - everything ok