AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Thu October 05, 2023 07:13 AM

    Hello,

    I am sorry i suppose it is a very common error but here is the message returned when trying to migrate from YUM to DNF.


    root@apaai001:/tmp/derouet # ./dnf_aixtoolbox.sh -y
    Attempting download of dnf_bundle_aix_71_72.tar ...
    lwp-download: 500 Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
    Failed to download dnf_bundle_aix_71_72.tar
    root@apaai001:/tmp/derouet #

    From this AIX lpar i was able to reinstall the rpm package test-dummy directly from the IBM site.

    So i do not understand why we can re-install a package "test-dummy" from IBM site

     and why we cannot run "./dnf_aixtoolbox.sh -y" script ?

    Did we missed something ?

    Do we have to check certificates ?

    We thank you very much for your help,

    root@apaai001:/tmp/derouet # yum reinstall test-dummy
    Setting up Reinstall Process
    Resolving Dependencies
    --> Running transaction check
    ---> Package test-dummy.ppc 0:1.1-5 will be reinstalled
    --> Finished Dependency Resolution

    Dependencies Resolved

    =============================================================================================================================================================
     Package                                 Arch                             Version                             Repository                                Size
    =============================================================================================================================================================
    Reinstalling:
     test-dummy                              ppc                              1.1-5                               AIX_Toolbox                              863

    Transaction Summary
    =============================================================================================================================================================
    Reinstall     1 Package

    Total download size: 863
    Installed size: 863
    Is this ok [y/N]: y
    Downloading Packages:
    test-dummy-1.1-5.aix6.1.ppc.rpm                                                                                                       |  863 B  00:00:00
    Running Transaction Check
    Running Transaction Test
    Transaction Test Succeeded
    Running Transaction
      Installing : test-dummy-1.1-5.ppc                                                                                                                      1/2
      Cleanup    : test-dummy                                                                                                                                2/2

    Installed:
      test-dummy.ppc 0:1.1-5

    Complete!
    root@apaai001:/tmp/derouet #
    root@apaai001:/tmp/derouet #

    root@apaai001:/tmp/derouet #
    root@apaai001:/tmp/derouet # cat /opt/freeware/etc/yum/yum.conf
    [main]
    cachedir=/var/cache/yum
    keepcache=1
    debuglevel=2
    logfile=/var/log/yum.log
    exactarch=1
    obsoletes=1
    plugins=1

    [AIX_Toolbox]
    name=AIX generic repository
    baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
    #baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox/
    sslcacert=/var/ssl/certs/ca-bundle.crt
    enabled=1
    gpgcheck=0

    [AIX_Toolbox_noarch]
    name=AIX noarch repository
    baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
    #baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_noarch/
    sslcacert=/var/ssl/certs/ca-bundle.crt
    enabled=1
    gpgcheck=0


    [AIX_Toolbox_71]
    name=AIX 7.1 specific repository
    #baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
    baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_71/
    enabled=0
    gpgcheck=0

    [AIX_Toolbox_72]
    name=AIX 7.2 specific repository
    baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/
    #baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_72/
    sslcacert=/var/ssl/certs/ca-bundle.crt
    enabled=1
    gpgcheck=0


    root@apaai001:/tmp/derouet #



    ------------------------------
    christophe derouet
    ------------------------------


  • 2.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Fri October 06, 2023 03:28 AM

    Hi Christophe,

    I can't say why you get the error with the scripts, but you can export PERL_LWP_SSL_VERIFY_HOSTNAME=0 and it should switch off SSL certificate checking in lwp-download. The script should work then.



    ------------------------------
    Andrey Klyachkin

    https://www.power-devops.com
    ------------------------------



  • 3.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Mon October 23, 2023 05:57 AM

    Hello Andrey,

    The download is OK, we thank you very much.

    But on the 'dnf migrate' step, we still have something wrong with SSL certificate...

    Have a nice day,

    root@apaai001:/tmp/derouet # ./dnf_aixtoolbox.sh -y
    + export LANG=C
    + export PERL_LWP_SSL_VERIFY_HOSTNAME=0
    + [[ -e /usr/opt/rpm/bin/rpm ]]
    + RPM_CMD=/usr/opt/rpm/bin/rpm
    + /usr/bin/id -u
    + [[ 0 != 0 ]]
    + + /usr/bin/oslevel
    oslvl=7.2.0.0
    + + /usr/bin/lslpp -qLc bos.rte
    + /usr/bin/awk -F: {print $3}
    aix_ver=7.2.5.203
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f1
    af1=7
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f2
    af2=2
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f3
    af3=5
    + [[ 7.2.0.0 = 7.1.0.0 ]]
    + [[ ! 7 -ge 7 ]]
    + [[ ! 2 -ge 1 ]]
    + yum3_instd=0
    + /usr/bin/grep yum-3.4.3
    + /usr/opt/rpm/bin/rpm -qa
    + 1> /dev/null 2>& 1
    + [[ 0 -eq 0 ]]
    + yum3_instd=1
    + prog=dnf_aixtoolbox.sh
    + yum4=0
    + [[ 1 -ne 1 ]]
    + + echo -y
    + /usr/bin/cut -c1-3
    arg=-y
    + [[ -y = -d ]]
    + [[ -y = -y ]]
    + yum4=2
    + + lslpp -Lc openssl.base
    + /usr/bin/awk FNR==2
    + /usr/bin/awk -F: {print $3}
    ssl_ver=1.1.1.2200
    + + echo 1.1.1.2200
    + /usr/bin/cut -d. -f1
    f1=1
    + + echo 1.1.1.2200
    + /usr/bin/cut -d. -f2
    f2=1
    + + echo 1.1.1.2200
    + /usr/bin/cut -d. -f3
    f3=1
    + + echo 1.1.1.2200
    + /usr/bin/cut -d. -f4
    f4=2200
    + [[ ! 1 -ge 1 ]]
    + [[ 1 -eq 1 ]]
    + [[ ! 1 -ge 1 ]]
    + + /usr/bin/oslevel
    oslvl=7.2.0.0
    + aix_730_plus=0
    + + echo 7.2.0.0
    + /usr/bin/cut -d. -f1
    os_f1=7
    + + echo 7.2.0.0
    + /usr/bin/cut -d. -f2
    os_f2=2
    + + echo 7.2.0.0
    + /usr/bin/cut -d. -f3
    os_f3=0
    + + echo 7.2.0.0
    + /usr/bin/cut -d. -f4
    os_f4=0
    + [[ 7 -ge 7 ]]
    + [[ 2 -ge 3 ]]
    + aix_715_prior=0
    + + /usr/bin/lslpp -qLc bos.rte
    + /usr/bin/cut -d: -f3
    oslvl_tl=7.2.5.203
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f1
    os_f1=7
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f2
    os_f2=2
    + + echo 7.2.5.203
    + /usr/bin/cut -d. -f3
    os_f3=5
    + [[ 7 -eq 7 ]]
    + [[ 2 -eq 1 ]]
    + [[ 0 -eq 1 ]]
    + echo (512)
    + bc
    + typeset -i total_req=512
    + + /usr/bin/df -m /tmp
    + /usr/bin/sed -e /Filesystem/d
    + /usr/bin/awk {print $3}
    tmp_free=7237.48
    + [[ 7237.48 -le 512 ]]
    + echo (512)
    + bc
    + typeset -i total_opt=512
    + + /usr/bin/df -m /opt
    + /usr/bin/awk {print $3}
    + /usr/bin/head -1
    + /usr/bin/sed -e /Filesystem/d
    opt_free=1798.52
    + [[ 1798.52 -le 512 ]]
    + + date +%Y%m%d%H%M%S
    curr_time=20231023114749
    + mkdir -p /tmp/dnf-20231023114749
    + + echo /tmp/dnf-20231023114749
    tmppath=/tmp/dnf-20231023114749
    + cd /tmp/dnf-20231023114749
    + [[ 0 -eq 1 ]]
    + [[ 0 -eq 1 ]]
    + echo Attempting download of dnf_bundle_aix_71_72.tar ...
    Attempting download of dnf_bundle_aix_71_72.tar ...
    + /usr/opt/perl5/bin/lwp-download https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/dnf_bundle_aix_71_72.tar
    + LDR_CNTRL=MAXDATA=0x80000000@DSA
    Saving to 'dnf_bundle_aix_71_72.tar'...
    208 MB received in 41 seconds (5.08 MB/sec)
    + [[ 0 -ne 0 ]]
    + [[ 0 -eq 1 ]]
    + echo \nExtracting dnf_bundle_aix_71_72.tar ...

    Extracting dnf_bundle_aix_71_72.tar ...
    + /usr/bin/tar -xvf dnf_bundle_aix_71_72.tar
    x ca-certificates-2023.2.60-0.aix7.1.ppc.rpm, 991206 bytes, 1936 tape blocks
    x dnf-4.2.17-32_4.aix7.1.noarch.rpm, 11135 bytes, 22 tape blocks
    x dnf-automatic-4.2.17-32_4.aix7.1.noarch.rpm, 12450 bytes, 25 tape blocks
    x dnf-data-4.2.17-32_4.aix7.1.noarch.rpm, 23693 bytes, 47 tape blocks
    x extra_list, 384 bytes, 1 tape blocks
    x install_dnf.sh, 13552 bytes, 27 tape blocks
    x libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 1273688 bytes, 2488 tape blocks
    x libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 15816971 bytes, 30893 tape blocks
    x libmodulemd-1.5.2-32_2.aix7.1.ppc.rpm, 3433754 bytes, 6707 tape blocks
    x librepo-1.11.0-32_2.aix7.1.ppc.rpm, 3653390 bytes, 7136 tape blocks
    x libsmartcols-2.34-32_1.aix7.1.ppc.rpm, 183412 bytes, 359 tape blocks
    x libsolv-0.7.9-32_3.aix7.1.ppc.rpm, 1533540 bytes, 2996 tape blocks
    x libzstd-1.4.4-32_1.aix7.1.ppc.rpm, 469194 bytes, 917 tape blocks
    x p11-kit-0.23.22-0.aix7.1.ppc.rpm, 2148539 bytes, 4197 tape blocks
    x p11-kit-tools-0.23.22-0.aix7.1.ppc.rpm, 274086 bytes, 536 tape blocks
    x python3-3.9.16-0.aix7.1.ppc.rpm, 8920 bytes, 18 tape blocks
    x python3-dateutil-2.8.0-2.aix7.1.noarch.rpm, 6128 bytes, 12 tape blocks
    x python3-devel-3.9.16-0.aix7.1.ppc.rpm, 7699 bytes, 16 tape blocks
    x python3-dnf-4.2.17-32_4.aix7.1.noarch.rpm, 7598 bytes, 15 tape blocks
    x python3-dnf-plugin-migrate-4.0.16-32_2.aix7.1.noarch.rpm, 6568 bytes, 13 tape blocks
    x python3-dnf-plugins-core-4.0.16-32_2.aix7.1.noarch.rpm, 6776 bytes, 14 tape blocks
    x python3-gpg-1.13.1-32_3.aix7.1.ppc.rpm, 7040 bytes, 14 tape blocks
    x python3-hawkey-0.39.1-32_3.aix7.1.ppc.rpm, 23264 bytes, 46 tape blocks
    x python3-idle-3.9.16-0.aix7.1.ppc.rpm, 7283 bytes, 15 tape blocks
    x python3-libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 13360 bytes, 27 tape blocks
    x python3-libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 23264 bytes, 46 tape blocks
    x python3-librepo-1.11.0-32_2.aix7.1.ppc.rpm, 12860 bytes, 26 tape blocks
    x python3-six-1.13.0-2.aix7.1.noarch.rpm, 5820 bytes, 12 tape blocks
    x python3-test-3.9.16-0.aix7.1.ppc.rpm, 6228 bytes, 13 tape blocks
    x python3-tkinter-3.9.16-0.aix7.1.ppc.rpm, 6120 bytes, 12 tape blocks
    x python3.9-3.9.16-0.aix7.1.ppc.rpm, 56782290 bytes, 110903 tape blocks
    x python3.9-dateutil-2.8.0-2.aix7.1.noarch.rpm, 310485 bytes, 607 tape blocks
    x python3.9-devel-3.9.16-0.aix7.1.ppc.rpm, 19947643 bytes, 38961 tape blocks
    x python3.9-dnf-4.2.17-32_4.aix7.1.noarch.rpm, 196779 bytes, 385 tape blocks
    x python3.9-dnf-plugin-migrate-4.0.16-32_2.aix7.1.noarch.rpm, 8242 bytes, 17 tape blocks
    x python3.9-dnf-plugins-core-4.0.16-32_2.aix7.1.noarch.rpm, 33639 bytes, 66 tape blocks
    x python3.9-gpg-1.13.1-32_3.aix7.1.ppc.rpm, 1192531 bytes, 2330 tape blocks
    x python3.9-hawkey-0.39.1-32_3.aix7.1.ppc.rpm, 3116653 bytes, 6088 tape blocks
    x python3.9-idle-3.9.16-0.aix7.1.ppc.rpm, 2328852 bytes, 4549 tape blocks
    x python3.9-libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 1049812 bytes, 2051 tape blocks
    x python3.9-libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 22550948 bytes, 44045 tape blocks
    x python3.9-librepo-1.11.0-32_2.aix7.1.ppc.rpm, 2293000 bytes, 4479 tape blocks
    x python3.9-six-1.13.0-2.aix7.1.noarch.rpm, 45630 bytes, 90 tape blocks
    x python3.9-test-3.9.16-0.aix7.1.ppc.rpm, 33159212 bytes, 64765 tape blocks
    x python3.9-tkinter-3.9.16-0.aix7.1.ppc.rpm, 1162787 bytes, 2272 tape blocks
    x rpm-python3-4.15.1-32_2.aix7.1.ppc.rpm, 9496 bytes, 19 tape blocks
    x rpm-python3.9-4.15.1-32_2.aix7.1.ppc.rpm, 98982 bytes, 194 tape blocks
    x rpm.rte, 43051008 bytes, 84084 tape blocks
    x yum-4.2.17-32_4.aix7.1.noarch.rpm, 8634 bytes, 17 tape blocks
    x zchunk-1.1.4-32_2.aix7.1.ppc.rpm, 554294 bytes, 1083 tape blocks
    x zchunk-devel-1.1.4-32_2.aix7.1.ppc.rpm, 19256 bytes, 38 tape blocks
    x zchunk-libs-1.1.4-32_2.aix7.1.ppc.rpm, 534032 bytes, 1044 tape blocks
    + ./install_dnf.sh -y 2 1 2

    Installing rpm.rte at the latest version ...
    This may take several minutes depending on the number of rpms installed...
    +-----------------------------------------------------------------------------+
                        Pre-installation Verification...
    +-----------------------------------------------------------------------------+
    Verifying selections...done
    Verifying requisites...done
    Results...

    SUCCESSES
    ---------
      Filesets listed in this section passed pre-installation verification
      and will be installed.

      Selected Filesets
      -----------------
      rpm.rte 4.15.1.1011                         # RPM Package Manager

      << End of Success Section >>

    +-----------------------------------------------------------------------------+
                       BUILDDATE Verification ...
    +-----------------------------------------------------------------------------+
    Verifying build dates...done
    FILESET STATISTICS
    ------------------
        1  Selected to be installed, of which:
            1  Passed pre-installation verification
      ----
        1  Total to be installed

    +-----------------------------------------------------------------------------+
                             Installing Software...
    +-----------------------------------------------------------------------------+

    installp: APPLYING software for:
            rpm.rte 4.15.1.1011

    Checking if rpm package is already owning
      some of the libraries and binaries..

    . . . . . << Copyright notice for rpm.rte >> . . . . . . .
     Licensed Materials - Property of IBM

     5765H4000
       Copyright International Business Machines Corp. 2014, 2020-2023.
       Copyright "Cowboy" Ben Alman, 2010.
       Copyright Steven Benner (http://stevenbenner.com/), 2013.
       Copyright The Regents of the University of California, 1990, 1993, 1994.
       Copyright Ralf Corsepius <corsepiu@fedoraproject.org>, 2007.
       Copyright Vasil Dinkov, Vadikom Web Ltd., 2016.
       Copyright The Dojo Foundation, 2011.
       Copyright Ulrich Drepper <drepper@gnu.ai.mit.edu>, 1995-1997, 2000-2006.
       Copyright Tom Dyas <tdyas@eden.rutgers.edu>, 1998.
       Copyright W. L. Estes <wlestes@uncg.edu>, 1998.
       Copyright Free Software Foundation, Inc., 1989, 1991-2018.
       Copyright Dave Furfero, 2011-2014.
       Copyright Neal Gompa <ngompa13@gmail.com>, 2015.
       Copyright Dimitri van Heesch, 1997-2017.
       Copyright The Internet Society (1998).
       Copyright Per Oeyvind Karlsen <proyvind@moondrake.org>, 2010.
       Copyright Dmitry V. Levin <ldv@altlinux.org>, 2019.
       Copyright Dan Nicholson <dbn.lists@gmail.com>, 2012-2015.
       Copyright Red Hat, Inc., 1998-2003, 2005, 2007, 2009-2011, 2016-2017.
       Copyright Red Hat Software, 1995-2002.
       Copyright Scott James Remnant <scott@netsplit.com>, 2004.
       Copyright John Resig, 2011.
       Copyright Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>, 2004.
       Copyright System Design and Research, 2003.
       Copyright Julian Seward et al., 2002-2015.
       Copyright Mark J. Wielaard <mark@klomp.org>, 2016, 2019.
       Copyright X Consortium, 1994.

     All rights reserved.
     US Government Users Restricted Rights - Use, duplication or disclosure
     restricted by GSA ADP Schedule Contract with IBM Corp.
    . . . . . << End of copyright notice for rpm.rte >>. . . .

    ##################################################################
      This version of rpm installs files under the path /usr/opt/rpm.
      More detailed information on new changes can be found in
      /usr/opt/rpm/README file.
    ##################################################################

    Please wait...
    Successfully updated the Kernel Authorization Table.
    Successfully updated the Kernel Role Table.
    Successfully updated the Kernel Command Table.
    Successfully updated the Kernel Device Table.
    Successfully updated the Kernel Object Domain Table.
    Successfully updated the Kernel  Domains Table.
    Successfully updated the Kernel RBAC log level.
    Successfully updated the Kernel Authorization Table.
    Successfully updated the Kernel Role Table.
    Successfully updated the Kernel Command Table.
    Successfully updated the Kernel Device Table.
    Successfully updated the Kernel Object Domain Table.
    Successfully updated the Kernel  Domains Table.
    Successfully updated the Kernel RBAC log level.
    Finished processing all filesets.  (Total time:  31 secs).

    +-----------------------------------------------------------------------------+
                                    Summaries:
    +-----------------------------------------------------------------------------+

    Installation Summary
    --------------------
    Name                        Level           Part        Event       Result
    -------------------------------------------------------------------------------
    rpm.rte                     4.15.1.1011     USR         APPLY       SUCCESS
    rpm.rte                     4.15.1.1011     ROOT        APPLY       SUCCESS


    Checking whether any of the rpms from dnf_bundle are already installed...
    Takes couple of minutes to process.

    ca-certificates-2021.2.52-3.ppc will be updated to ca-certificates-2023.2.60-0
    dnf-4.2.17-32_4 will be installed
    dnf-automatic-4.2.17-32_4 will be installed
    dnf-data-4.2.17-32_4 will be installed
    libcomps-0.1.15-32_1 will be installed
    libdnf-0.39.1-32_3 will be installed
    libmodulemd-1.5.2-32_2 will be installed
    librepo-1.11.0-32_2 will be installed
    libsmartcols-2.34-32_1 will be installed
    libsolv-0.7.9-32_3 will be installed
    libzstd-1.4.4-32_1 will be installed
    Skipping p11-kit-0.23.22-0 as higher version p11-kit-0.23.22-1.ppc is installed.
    Skipping p11-kit-tools-0.23.22-0 as higher version p11-kit-tools-0.23.22-1.ppc is installed.
    Skipping python3-3.9.16-0 as higher version python3-3.9.17-1.ppc is installed.
    python3-dateutil-2.8.0-2 will be installed
    python3-dnf-4.2.17-32_4 will be installed
    python3-dnf-plugin-migrate-4.0.16-32_2 will be installed
    python3-dnf-plugins-core-4.0.16-32_2 will be installed
    python3-gpg-1.13.1-32_3 will be installed
    python3-hawkey-0.39.1-32_3 will be installed
    python3-libcomps-0.1.15-32_1 will be installed
    python3-libdnf-0.39.1-32_3 will be installed
    python3-librepo-1.11.0-32_2 will be installed
    python3-six-1.13.0-2 will be installed
    Skipping python3.9-3.9.16-0 as higher version python3.9-3.9.17-1.ppc is installed.
    python3.9-dateutil-2.8.0-2 will be installed
    python3.9-dnf-4.2.17-32_4 will be installed
    python3.9-dnf-plugin-migrate-4.0.16-32_2 will be installed
    python3.9-dnf-plugins-core-4.0.16-32_2 will be installed
    python3.9-gpg-1.13.1-32_3 will be installed
    python3.9-hawkey-0.39.1-32_3 will be installed
    python3.9-libcomps-0.1.15-32_1 will be installed
    python3.9-libdnf-0.39.1-32_3 will be installed
    python3.9-librepo-1.11.0-32_2 will be installed
    python3.9-six-1.13.0-2 will be installed
    rpm-python3-4.15.1-32_2 will be installed
    rpm-python3.9-4.15.1-32_2 will be installed
    yum-3.4.3-8.noarch will be updated to yum-4.2.17-32_4
    zchunk-libs-1.1.4-32_2 will be installed

    Installing the packages...

    Verifying...                          ################################# [100%]
    Preparing...                          ################################# [100%]
    Updating / installing...
       1:libzstd-1.4.4-32_1               ################################# [  3%]
       2:libmodulemd-1.5.2-32_2           ################################# [  5%]
       3:libsolv-0.7.9-32_3               ################################# [  8%]
       4:rpm-python3.9-4.15.1-32_2        ################################# [ 11%]
       5:libsmartcols-2.34-32_1           ################################# [ 14%]
       6:zchunk-libs-1.1.4-32_2           ################################# [ 16%]
       7:librepo-1.11.0-32_2              ################################# [ 19%]
       8:libdnf-0.39.1-32_3               ################################# [ 22%]
       9:python3.9-libdnf-0.39.1-32_3     ################################# [ 24%]
      10:python3.9-hawkey-0.39.1-32_3     ################################# [ 27%]
      11:python3.9-gpg-1.13.1-32_3        ################################# [ 30%]
      12:python3.9-dateutil-2.8.0-2       ################################# [ 32%]
      13:dnf-data-4.2.17-32_4             ################################# [ 35%]
      14:python3.9-librepo-1.11.0-32_2    ################################# [ 38%]
      15:python3.9-six-1.13.0-2           ################################# [ 41%]
      16:libcomps-0.1.15-32_1             ################################# [ 43%]
      17:python3.9-libcomps-0.1.15-32_1   ################################# [ 46%]
      18:python3.9-dnf-4.2.17-32_4        ################################# [ 49%]
      19:python3.9-dnf-plugins-core-4.0.16################################# [ 51%]
      20:python3.9-dnf-plugin-migrate-4.0.################################# [ 54%]
      21:python3-dnf-4.2.17-32_4          ################################# [ 57%]
      22:dnf-4.2.17-32_4                  ################################# [ 59%]
      23:dnf-automatic-4.2.17-32_4        ################################# [ 62%]

    This version of yum4 is a soft link to dnf and all the yum commands are dnf commands.
    Repositories present in yum.conf is being used for dnf.


    Trying to create pkg_yumdb database required for migrate plugin
    Successfully created pkg_yumdb database
      24:yum-4.2.17-32_4                  ################################# [ 65%]
      25:python3-dnf-plugin-migrate-4.0.16################################# [ 68%]
      26:python3-dnf-plugins-core-4.0.16-3################################# [ 70%]
      27:python3-libcomps-0.1.15-32_1     ################################# [ 73%]
      28:python3-six-1.13.0-2             ################################# [ 76%]
      29:python3-librepo-1.11.0-32_2      ################################# [ 78%]
      30:python3-dateutil-2.8.0-2         ################################# [ 81%]
      31:python3-gpg-1.13.1-32_3          ################################# [ 84%]
      32:python3-hawkey-0.39.1-32_3       ################################# [ 86%]
      33:python3-libdnf-0.39.1-32_3       ################################# [ 89%]
      34:rpm-python3-4.15.1-32_2          ################################# [ 92%]
      35:ca-certificates-2023.2.60-0      ################################# [ 95%]
    Cleaning up / removing...
      36:yum-3.4.3-8                      warning: /opt/freeware/etc/yum/yum.conf saved as /opt/freeware/etc/yum/yum.conf.rpmsave
    ################################# [ 97%]
      37:ca-certificates-2021.2.52-3      ################################# [100%]

    dnf installed successfully.
    Please run 'dnf update' to update packages to the latest level.

    Please note, RPM packages are downloaded in dnf cache /var/cache/dnf.
    RPM packages install files go under the path /opt.
    Hence it is recommended to always keep at least 512MB of free space in /var & /opt
    to avoid any download and installation/update failures.

    Trying to run 'dnf migrate' to migrate yum database to dnf.
    AIX generic repository                                                                                                  0.0  B/s |   0  B     00:00
    Errors during downloading metadata for repository 'AIX_Toolbox':
      - Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
    Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
    + [[ 0 -eq 0 ]]
    + cd -
    + 1> /dev/null 2>& 1
    + rm -rf /tmp/dnf-20231023114749
    + exit 0
    root@apaai001:/tmp/derouet #
    root@apaai001:/tmp/derouet #



    ------------------------------
    christophe derouet
    ------------------------------



  • 4.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Mon October 23, 2023 07:05 AM

    I can see DNF is installed successfully.

    But the migration from YUM to DNF fails...

    root@apaai001:/ # dnf list test-dummy
    AIX generic repository                                                                                                  0.0  B/s |   0  B     00:00
    Errors during downloading metadata for repository 'AIX_Toolbox':
      - Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
    Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
    root@apaai001:/ #
    root@apaai001:/ # yum list test-dummy
    AIX generic repository                                                                                                  0.0  B/s |   0  B     00:00
    Errors during downloading metadata for repository 'AIX_Toolbox':
      - Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
    Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
    root@apaai001:/ #
    root@apaai001:/ # dnf repolist
    repo id                                                                 repo name
    AIX_Toolbox                                                             AIX generic repository
    AIX_Toolbox_72                                                          AIX 7.2 specific repository
    AIX_Toolbox_noarch                                                      AIX noarch repository
    root@apaai001:/ #
    root@apaai001:/ # yum repolist
    repo id                                                                 repo name
    AIX_Toolbox                                                             AIX generic repository
    AIX_Toolbox_72                                                          AIX 7.2 specific repository
    AIX_Toolbox_noarch                                                      AIX noarch repository
    root@apaai001:/ #
    root@apaai001:/ #
    root@apaai001:/ #
    root@apaai001:/ #
    root@apaai001:/ #
    root@apaai001:/ #
    root@apaai001:/ # dnf migrate
    AIX generic repository                                                                                                  0.0  B/s |   0  B     00:00
    Errors during downloading metadata for repository 'AIX_Toolbox':
      - Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
    Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
    root@apaai001:/ #
    root@apaai001:/ # dnf version
    No such command: version. Please use /usr/bin/dnf --help
    It could be a DNF plugin command, try: "dnf install 'dnf-command(version)'"
    root@apaai001:/ #



    ------------------------------
    christophe derouet
    ------------------------------



  • 5.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Mon October 23, 2023 07:13 AM

    Hi Christophe,

    The error "certificate problem: self signed certificate in certificate chain" occurs if your system date is not set correctly.

    You can check the system date and can run "c_rehash"



    ------------------------------
    SANGAMESH
    ------------------------------



  • 6.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Mon October 23, 2023 07:28 AM
    Edited by christophe derouet Mon October 23, 2023 07:52 AM

    Hello Sangamesh,

    Can you explain to me what is the goal of this command please?

    We are working on our AIX Production NIM Master so i have to understand what this command will do.

    I thank you very much for your help,



    ------------------------------
    christophe derouet
    ------------------------------



  • 7.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Mon October 23, 2023 09:28 AM

    Hello Sangamesh,

    I tried this...

    root@apaai001:/var/ssl/certs #
    root@apaai001:/var/ssl/certs # /usr/bin/c_rehash
    Doing /var/ssl/certs
    WARNING: Skipping duplicate certificate ca-bundle.crt
    WARNING: Skipping duplicate certificate ca-bundle.crt.backup
    WARNING: Skipping duplicate certificate ca-bundle.trust.crt
    root@apaai001:/var/ssl/certs #
    root@apaai001:/var/ssl/certs #
    root@apaai001:/var/ssl/certs # echo $?
    0
    root@apaai001:/var/ssl/certs #

    but got same error from the "dnf migrate" command below... 

    root@apaai001:/var/ssl/certs #
    root@apaai001:/var/ssl/certs # dnf migrate
    AIX generic repository                                                                                                  0.0  B/s |   0  B     00:00
    Errors during downloading metadata for repository 'AIX_Toolbox':
      - Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
    Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
    root@apaai001:/var/ssl/certs #



    ------------------------------
    christophe derouet
    ------------------------------



  • 8.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Tue October 24, 2023 08:17 AM
    Edited by christophe derouet Tue October 24, 2023 08:20 AM

    Hello Sangamesh,

    I am sorry i made the bad choice... Putting sslverify=false parameter in our DNF configuration file.

    Now the "DNF Migrate" is successfull.

    Now DNF is available. 

    What should we check if we want to work with SSL certificates ? I will suppress sslverify=false parameter as soon as possible.

    Have a nice day,



    ------------------------------
    christophe derouet
    ------------------------------



  • 9.  RE: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)

    Posted Thu October 26, 2023 04:46 AM

    Hello,

    This is what we had to do before suppressing sslverify=false parameter.

    We had to download a CA certificate...

    Thank you very much Alexandre.

    HAve a nice day,




    ------------------------------
    christophe derouet
    ------------------------------