Good morning,

My DNF install has suddenly started failing with a certificat eerror:

 #  https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ez   <
lwp-download: 500 Can't connect to public.dhe.ibm.com:443 (SSL connect attempt failed because of handshake problems)

same for wget on the same link:

# install/ppc/dnf_bundle_aix_73.tar                            <
--2023-11-13 10:37:51--  https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/dnf_bundle_aix_73.tar
Resolving public.dhe.ibm.com... 129.35.224.112
Connecting to public.dhe.ibm.com|129.35.224.112|:443... connected.
Unable to establish SSL connection.

Has something happened or am I doing something wrong? This used to work. I tried running the cert update script /ansiblemnt/AIX/cert_update.sh, which runs silently but doesn't fix the problem.

Regards,

Henrik Morsing

Hello @Henrik Morsing!

Here I´m getting this message and it works, maybe the HSTS part is the problem?

wget  public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/dnf_bundle_aix_73.tar
URL transformed to HTTPS due to an HSTS policy
--2023-11-14 09:04:07--  https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/dnf_bundle_aix_73.tar
Resolving public.dhe.ibm.com... 170.225.119.151
Connecting to public.dhe.ibm.com|170.225.119.151|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 226887680 (216M) [application/x-tar]
Saving to: 'dnf_bundle_aix_73.tar'

dnf_bundle_aix_73.tar                                         1%[>                                                                                                                                         ]   2.28M   265KB/s    eta 17m 59s

HTH,

Ciao,

Steve

Hi Stephan,

Oddly, it worked from our other DC and it turned out the name resolved to different IP addresses. One is clearly broken, so I updated the DNF install script too fix it.

Regards,

Henrik Morsing

Thank you for answering, you made my day :)