Originally posted by: andreas.

Hi,

I recently installed yum on an AIX machine using the "yum_bundle_v4.tar" and this installation guide. Because we have to use a proxy server (https + authentication) I added the following to my /opt/freeware/etc/yum/yum.conf file in the [main] section:

proxy=https://someproxy.company.com:8080
proxy_username=someusername
proxy_password=somepassword

Whenever I run yum I get the following SSL error from curl:

root@:/root> yum repolist
anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml:">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#35 - "Unknown SSL protocol error in connection to someproxy.company.com:8080 "
Trying other mirror.
repo id                 repo name                         status
AIX_Toolbox             AIX generic repository            0
AIX_Toolbox_71          AIX 7.1 specific repository       0
AIX_Toolbox_noarch      AIX noarch repository             0
repolist: 0

Although curl supports options like "--proxy-insecure" since version 7.52.x, I can't get it to work:

root@:/root> curl -D - --proxy  somepassword@someproxy.company.com:8080">https://someusername:somepassword@someproxy.company.com:8080 --proxy-insecure http://whatismyip.org
curl: (35) Unknown SSL protocol error in connection to someproxy.company.com:8080

There's only one (1) OpenSSL version installed on this machine, the one which comes with AIX:

root@:/root> lslpp -l openssl.base
  Fileset                      Level  State      Description
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  openssl.base            1.0.2.1000  COMMITTED  Open Secure Socket Layer

Path: /etc/objrepos
  openssl.base            1.0.2.1000  COMMITTED  Open Secure Socket Layer

root@:/root> rpm -qa | grep -i openssl
root@:/root>

Any ideas?

Originally posted by: AyappanP

This is more of a issue with SSL server on the proxy machine. Check whether verbose option in curl gives more info about this.