Thank you very much Alexandre.
Original Message:
Sent: Tue October 24, 2023 08:17 AM
From: christophe derouet
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hello Sangamesh,
I am sorry i made the bad choice... Putting sslverify=false parameter in our DNF configuration file.
Now the "DNF Migrate" is successfull.
Now DNF is available.
What should we check if we want to work with SSL certificates ? I will suppress sslverify=false parameter as soon as possible.
Have a nice day,
------------------------------
christophe derouet
Original Message:
Sent: Mon October 23, 2023 09:28 AM
From: christophe derouet
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hello Sangamesh,
I tried this...
root@apaai001:/var/ssl/certs #
root@apaai001:/var/ssl/certs # /usr/bin/c_rehash
Doing /var/ssl/certs
WARNING: Skipping duplicate certificate ca-bundle.crt
WARNING: Skipping duplicate certificate ca-bundle.crt.backup
WARNING: Skipping duplicate certificate ca-bundle.trust.crt
root@apaai001:/var/ssl/certs #
root@apaai001:/var/ssl/certs #
root@apaai001:/var/ssl/certs # echo $?
0
root@apaai001:/var/ssl/certs #
but got same error from the "dnf migrate" command below...
root@apaai001:/var/ssl/certs #
root@apaai001:/var/ssl/certs # dnf migrate
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
root@apaai001:/var/ssl/certs #
------------------------------
christophe derouet
Original Message:
Sent: Mon October 23, 2023 07:28 AM
From: christophe derouet
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hello Sangamesh,
Can you explain to me what is the goal of this command please?
We are working on our AIX Production NIM Master so i have to understand what this command will do.
I thank you very much for your help,
------------------------------
christophe derouet
Original Message:
Sent: Mon October 23, 2023 07:13 AM
From: SANGAMESH MALLAYYA
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hi Christophe,
The error "certificate problem: self signed certificate in certificate chain" occurs if your system date is not set correctly.
You can check the system date and can run "c_rehash"
------------------------------
SANGAMESH
Original Message:
Sent: Mon October 23, 2023 05:56 AM
From: christophe derouet
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hello Andrey,
The download is OK, we thank you very much.
But on the 'dnf migrate' step, we still have something wrong with SSL certificate...
Have a nice day,
root@apaai001:/tmp/derouet # ./dnf_aixtoolbox.sh -y
+ export LANG=C
+ export PERL_LWP_SSL_VERIFY_HOSTNAME=0
+ [[ -e /usr/opt/rpm/bin/rpm ]]
+ RPM_CMD=/usr/opt/rpm/bin/rpm
+ /usr/bin/id -u
+ [[ 0 != 0 ]]
+ + /usr/bin/oslevel
oslvl=7.2.0.0
+ + /usr/bin/lslpp -qLc bos.rte
+ /usr/bin/awk -F: {print $3}
aix_ver=7.2.5.203
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f1
af1=7
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f2
af2=2
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f3
af3=5
+ [[ 7.2.0.0 = 7.1.0.0 ]]
+ [[ ! 7 -ge 7 ]]
+ [[ ! 2 -ge 1 ]]
+ yum3_instd=0
+ /usr/bin/grep yum-3.4.3
+ /usr/opt/rpm/bin/rpm -qa
+ 1> /dev/null 2>& 1
+ [[ 0 -eq 0 ]]
+ yum3_instd=1
+ prog=dnf_aixtoolbox.sh
+ yum4=0
+ [[ 1 -ne 1 ]]
+ + echo -y
+ /usr/bin/cut -c1-3
arg=-y
+ [[ -y = -d ]]
+ [[ -y = -y ]]
+ yum4=2
+ + lslpp -Lc openssl.base
+ /usr/bin/awk FNR==2
+ /usr/bin/awk -F: {print $3}
ssl_ver=1.1.1.2200
+ + echo 1.1.1.2200
+ /usr/bin/cut -d. -f1
f1=1
+ + echo 1.1.1.2200
+ /usr/bin/cut -d. -f2
f2=1
+ + echo 1.1.1.2200
+ /usr/bin/cut -d. -f3
f3=1
+ + echo 1.1.1.2200
+ /usr/bin/cut -d. -f4
f4=2200
+ [[ ! 1 -ge 1 ]]
+ [[ 1 -eq 1 ]]
+ [[ ! 1 -ge 1 ]]
+ + /usr/bin/oslevel
oslvl=7.2.0.0
+ aix_730_plus=0
+ + echo 7.2.0.0
+ /usr/bin/cut -d. -f1
os_f1=7
+ + echo 7.2.0.0
+ /usr/bin/cut -d. -f2
os_f2=2
+ + echo 7.2.0.0
+ /usr/bin/cut -d. -f3
os_f3=0
+ + echo 7.2.0.0
+ /usr/bin/cut -d. -f4
os_f4=0
+ [[ 7 -ge 7 ]]
+ [[ 2 -ge 3 ]]
+ aix_715_prior=0
+ + /usr/bin/lslpp -qLc bos.rte
+ /usr/bin/cut -d: -f3
oslvl_tl=7.2.5.203
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f1
os_f1=7
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f2
os_f2=2
+ + echo 7.2.5.203
+ /usr/bin/cut -d. -f3
os_f3=5
+ [[ 7 -eq 7 ]]
+ [[ 2 -eq 1 ]]
+ [[ 0 -eq 1 ]]
+ echo (512)
+ bc
+ typeset -i total_req=512
+ + /usr/bin/df -m /tmp
+ /usr/bin/sed -e /Filesystem/d
+ /usr/bin/awk {print $3}
tmp_free=7237.48
+ [[ 7237.48 -le 512 ]]
+ echo (512)
+ bc
+ typeset -i total_opt=512
+ + /usr/bin/df -m /opt
+ /usr/bin/awk {print $3}
+ /usr/bin/head -1
+ /usr/bin/sed -e /Filesystem/d
opt_free=1798.52
+ [[ 1798.52 -le 512 ]]
+ + date +%Y%m%d%H%M%S
curr_time=20231023114749
+ mkdir -p /tmp/dnf-20231023114749
+ + echo /tmp/dnf-20231023114749
tmppath=/tmp/dnf-20231023114749
+ cd /tmp/dnf-20231023114749
+ [[ 0 -eq 1 ]]
+ [[ 0 -eq 1 ]]
+ echo Attempting download of dnf_bundle_aix_71_72.tar ...
Attempting download of dnf_bundle_aix_71_72.tar ...
+ /usr/opt/perl5/bin/lwp-download https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/dnf_bundle_aix_71_72.tar
+ LDR_CNTRL=MAXDATA=0x80000000@DSA
Saving to 'dnf_bundle_aix_71_72.tar'...
208 MB received in 41 seconds (5.08 MB/sec)
+ [[ 0 -ne 0 ]]
+ [[ 0 -eq 1 ]]
+ echo \nExtracting dnf_bundle_aix_71_72.tar ...
Extracting dnf_bundle_aix_71_72.tar ...
+ /usr/bin/tar -xvf dnf_bundle_aix_71_72.tar
x ca-certificates-2023.2.60-0.aix7.1.ppc.rpm, 991206 bytes, 1936 tape blocks
x dnf-4.2.17-32_4.aix7.1.noarch.rpm, 11135 bytes, 22 tape blocks
x dnf-automatic-4.2.17-32_4.aix7.1.noarch.rpm, 12450 bytes, 25 tape blocks
x dnf-data-4.2.17-32_4.aix7.1.noarch.rpm, 23693 bytes, 47 tape blocks
x extra_list, 384 bytes, 1 tape blocks
x install_dnf.sh, 13552 bytes, 27 tape blocks
x libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 1273688 bytes, 2488 tape blocks
x libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 15816971 bytes, 30893 tape blocks
x libmodulemd-1.5.2-32_2.aix7.1.ppc.rpm, 3433754 bytes, 6707 tape blocks
x librepo-1.11.0-32_2.aix7.1.ppc.rpm, 3653390 bytes, 7136 tape blocks
x libsmartcols-2.34-32_1.aix7.1.ppc.rpm, 183412 bytes, 359 tape blocks
x libsolv-0.7.9-32_3.aix7.1.ppc.rpm, 1533540 bytes, 2996 tape blocks
x libzstd-1.4.4-32_1.aix7.1.ppc.rpm, 469194 bytes, 917 tape blocks
x p11-kit-0.23.22-0.aix7.1.ppc.rpm, 2148539 bytes, 4197 tape blocks
x p11-kit-tools-0.23.22-0.aix7.1.ppc.rpm, 274086 bytes, 536 tape blocks
x python3-3.9.16-0.aix7.1.ppc.rpm, 8920 bytes, 18 tape blocks
x python3-dateutil-2.8.0-2.aix7.1.noarch.rpm, 6128 bytes, 12 tape blocks
x python3-devel-3.9.16-0.aix7.1.ppc.rpm, 7699 bytes, 16 tape blocks
x python3-dnf-4.2.17-32_4.aix7.1.noarch.rpm, 7598 bytes, 15 tape blocks
x python3-dnf-plugin-migrate-4.0.16-32_2.aix7.1.noarch.rpm, 6568 bytes, 13 tape blocks
x python3-dnf-plugins-core-4.0.16-32_2.aix7.1.noarch.rpm, 6776 bytes, 14 tape blocks
x python3-gpg-1.13.1-32_3.aix7.1.ppc.rpm, 7040 bytes, 14 tape blocks
x python3-hawkey-0.39.1-32_3.aix7.1.ppc.rpm, 23264 bytes, 46 tape blocks
x python3-idle-3.9.16-0.aix7.1.ppc.rpm, 7283 bytes, 15 tape blocks
x python3-libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 13360 bytes, 27 tape blocks
x python3-libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 23264 bytes, 46 tape blocks
x python3-librepo-1.11.0-32_2.aix7.1.ppc.rpm, 12860 bytes, 26 tape blocks
x python3-six-1.13.0-2.aix7.1.noarch.rpm, 5820 bytes, 12 tape blocks
x python3-test-3.9.16-0.aix7.1.ppc.rpm, 6228 bytes, 13 tape blocks
x python3-tkinter-3.9.16-0.aix7.1.ppc.rpm, 6120 bytes, 12 tape blocks
x python3.9-3.9.16-0.aix7.1.ppc.rpm, 56782290 bytes, 110903 tape blocks
x python3.9-dateutil-2.8.0-2.aix7.1.noarch.rpm, 310485 bytes, 607 tape blocks
x python3.9-devel-3.9.16-0.aix7.1.ppc.rpm, 19947643 bytes, 38961 tape blocks
x python3.9-dnf-4.2.17-32_4.aix7.1.noarch.rpm, 196779 bytes, 385 tape blocks
x python3.9-dnf-plugin-migrate-4.0.16-32_2.aix7.1.noarch.rpm, 8242 bytes, 17 tape blocks
x python3.9-dnf-plugins-core-4.0.16-32_2.aix7.1.noarch.rpm, 33639 bytes, 66 tape blocks
x python3.9-gpg-1.13.1-32_3.aix7.1.ppc.rpm, 1192531 bytes, 2330 tape blocks
x python3.9-hawkey-0.39.1-32_3.aix7.1.ppc.rpm, 3116653 bytes, 6088 tape blocks
x python3.9-idle-3.9.16-0.aix7.1.ppc.rpm, 2328852 bytes, 4549 tape blocks
x python3.9-libcomps-0.1.15-32_1.aix7.1.ppc.rpm, 1049812 bytes, 2051 tape blocks
x python3.9-libdnf-0.39.1-32_3.aix7.1.ppc.rpm, 22550948 bytes, 44045 tape blocks
x python3.9-librepo-1.11.0-32_2.aix7.1.ppc.rpm, 2293000 bytes, 4479 tape blocks
x python3.9-six-1.13.0-2.aix7.1.noarch.rpm, 45630 bytes, 90 tape blocks
x python3.9-test-3.9.16-0.aix7.1.ppc.rpm, 33159212 bytes, 64765 tape blocks
x python3.9-tkinter-3.9.16-0.aix7.1.ppc.rpm, 1162787 bytes, 2272 tape blocks
x rpm-python3-4.15.1-32_2.aix7.1.ppc.rpm, 9496 bytes, 19 tape blocks
x rpm-python3.9-4.15.1-32_2.aix7.1.ppc.rpm, 98982 bytes, 194 tape blocks
x rpm.rte, 43051008 bytes, 84084 tape blocks
x yum-4.2.17-32_4.aix7.1.noarch.rpm, 8634 bytes, 17 tape blocks
x zchunk-1.1.4-32_2.aix7.1.ppc.rpm, 554294 bytes, 1083 tape blocks
x zchunk-devel-1.1.4-32_2.aix7.1.ppc.rpm, 19256 bytes, 38 tape blocks
x zchunk-libs-1.1.4-32_2.aix7.1.ppc.rpm, 534032 bytes, 1044 tape blocks
+ ./install_dnf.sh -y 2 1 2
Installing rpm.rte at the latest version ...
This may take several minutes depending on the number of rpms installed...
+-----------------------------------------------------------------------------+
Pre-installation Verification...
+-----------------------------------------------------------------------------+
Verifying selections...done
Verifying requisites...done
Results...
SUCCESSES
---------
Filesets listed in this section passed pre-installation verification
and will be installed.
Selected Filesets
-----------------
rpm.rte 4.15.1.1011 # RPM Package Manager
<< End of Success Section >>
+-----------------------------------------------------------------------------+
BUILDDATE Verification ...
+-----------------------------------------------------------------------------+
Verifying build dates...done
FILESET STATISTICS
------------------
1 Selected to be installed, of which:
1 Passed pre-installation verification
----
1 Total to be installed
+-----------------------------------------------------------------------------+
Installing Software...
+-----------------------------------------------------------------------------+
installp: APPLYING software for:
rpm.rte 4.15.1.1011
Checking if rpm package is already owning
some of the libraries and binaries..
. . . . . << Copyright notice for rpm.rte >> . . . . . . .
Licensed Materials - Property of IBM
5765H4000
Copyright International Business Machines Corp. 2014, 2020-2023.
Copyright "Cowboy" Ben Alman, 2010.
Copyright Steven Benner (http://stevenbenner.com/), 2013.
Copyright The Regents of the University of California, 1990, 1993, 1994.
Copyright Ralf Corsepius <corsepiu@fedoraproject.org>, 2007.
Copyright Vasil Dinkov, Vadikom Web Ltd., 2016.
Copyright The Dojo Foundation, 2011.
Copyright Ulrich Drepper <drepper@gnu.ai.mit.edu>, 1995-1997, 2000-2006.
Copyright Tom Dyas <tdyas@eden.rutgers.edu>, 1998.
Copyright W. L. Estes <wlestes@uncg.edu>, 1998.
Copyright Free Software Foundation, Inc., 1989, 1991-2018.
Copyright Dave Furfero, 2011-2014.
Copyright Neal Gompa <ngompa13@gmail.com>, 2015.
Copyright Dimitri van Heesch, 1997-2017.
Copyright The Internet Society (1998).
Copyright Per Oeyvind Karlsen <proyvind@moondrake.org>, 2010.
Copyright Dmitry V. Levin <ldv@altlinux.org>, 2019.
Copyright Dan Nicholson <dbn.lists@gmail.com>, 2012-2015.
Copyright Red Hat, Inc., 1998-2003, 2005, 2007, 2009-2011, 2016-2017.
Copyright Red Hat Software, 1995-2002.
Copyright Scott James Remnant <scott@netsplit.com>, 2004.
Copyright John Resig, 2011.
Copyright Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>, 2004.
Copyright System Design and Research, 2003.
Copyright Julian Seward et al., 2002-2015.
Copyright Mark J. Wielaard <mark@klomp.org>, 2016, 2019.
Copyright X Consortium, 1994.
All rights reserved.
US Government Users Restricted Rights - Use, duplication or disclosure
restricted by GSA ADP Schedule Contract with IBM Corp.
. . . . . << End of copyright notice for rpm.rte >>. . . .
##################################################################
This version of rpm installs files under the path /usr/opt/rpm.
More detailed information on new changes can be found in
/usr/opt/rpm/README file.
##################################################################
Please wait...
Successfully updated the Kernel Authorization Table.
Successfully updated the Kernel Role Table.
Successfully updated the Kernel Command Table.
Successfully updated the Kernel Device Table.
Successfully updated the Kernel Object Domain Table.
Successfully updated the Kernel Domains Table.
Successfully updated the Kernel RBAC log level.
Successfully updated the Kernel Authorization Table.
Successfully updated the Kernel Role Table.
Successfully updated the Kernel Command Table.
Successfully updated the Kernel Device Table.
Successfully updated the Kernel Object Domain Table.
Successfully updated the Kernel Domains Table.
Successfully updated the Kernel RBAC log level.
Finished processing all filesets. (Total time: 31 secs).
+-----------------------------------------------------------------------------+
Summaries:
+-----------------------------------------------------------------------------+
Installation Summary
--------------------
Name Level Part Event Result
-------------------------------------------------------------------------------
rpm.rte 4.15.1.1011 USR APPLY SUCCESS
rpm.rte 4.15.1.1011 ROOT APPLY SUCCESS
Checking whether any of the rpms from dnf_bundle are already installed...
Takes couple of minutes to process.
ca-certificates-2021.2.52-3.ppc will be updated to ca-certificates-2023.2.60-0
dnf-4.2.17-32_4 will be installed
dnf-automatic-4.2.17-32_4 will be installed
dnf-data-4.2.17-32_4 will be installed
libcomps-0.1.15-32_1 will be installed
libdnf-0.39.1-32_3 will be installed
libmodulemd-1.5.2-32_2 will be installed
librepo-1.11.0-32_2 will be installed
libsmartcols-2.34-32_1 will be installed
libsolv-0.7.9-32_3 will be installed
libzstd-1.4.4-32_1 will be installed
Skipping p11-kit-0.23.22-0 as higher version p11-kit-0.23.22-1.ppc is installed.
Skipping p11-kit-tools-0.23.22-0 as higher version p11-kit-tools-0.23.22-1.ppc is installed.
Skipping python3-3.9.16-0 as higher version python3-3.9.17-1.ppc is installed.
python3-dateutil-2.8.0-2 will be installed
python3-dnf-4.2.17-32_4 will be installed
python3-dnf-plugin-migrate-4.0.16-32_2 will be installed
python3-dnf-plugins-core-4.0.16-32_2 will be installed
python3-gpg-1.13.1-32_3 will be installed
python3-hawkey-0.39.1-32_3 will be installed
python3-libcomps-0.1.15-32_1 will be installed
python3-libdnf-0.39.1-32_3 will be installed
python3-librepo-1.11.0-32_2 will be installed
python3-six-1.13.0-2 will be installed
Skipping python3.9-3.9.16-0 as higher version python3.9-3.9.17-1.ppc is installed.
python3.9-dateutil-2.8.0-2 will be installed
python3.9-dnf-4.2.17-32_4 will be installed
python3.9-dnf-plugin-migrate-4.0.16-32_2 will be installed
python3.9-dnf-plugins-core-4.0.16-32_2 will be installed
python3.9-gpg-1.13.1-32_3 will be installed
python3.9-hawkey-0.39.1-32_3 will be installed
python3.9-libcomps-0.1.15-32_1 will be installed
python3.9-libdnf-0.39.1-32_3 will be installed
python3.9-librepo-1.11.0-32_2 will be installed
python3.9-six-1.13.0-2 will be installed
rpm-python3-4.15.1-32_2 will be installed
rpm-python3.9-4.15.1-32_2 will be installed
yum-3.4.3-8.noarch will be updated to yum-4.2.17-32_4
zchunk-libs-1.1.4-32_2 will be installed
Installing the packages...
Verifying... ################################# [100%]
Preparing... ################################# [100%]
Updating / installing...
1:libzstd-1.4.4-32_1 ################################# [ 3%]
2:libmodulemd-1.5.2-32_2 ################################# [ 5%]
3:libsolv-0.7.9-32_3 ################################# [ 8%]
4:rpm-python3.9-4.15.1-32_2 ################################# [ 11%]
5:libsmartcols-2.34-32_1 ################################# [ 14%]
6:zchunk-libs-1.1.4-32_2 ################################# [ 16%]
7:librepo-1.11.0-32_2 ################################# [ 19%]
8:libdnf-0.39.1-32_3 ################################# [ 22%]
9:python3.9-libdnf-0.39.1-32_3 ################################# [ 24%]
10:python3.9-hawkey-0.39.1-32_3 ################################# [ 27%]
11:python3.9-gpg-1.13.1-32_3 ################################# [ 30%]
12:python3.9-dateutil-2.8.0-2 ################################# [ 32%]
13:dnf-data-4.2.17-32_4 ################################# [ 35%]
14:python3.9-librepo-1.11.0-32_2 ################################# [ 38%]
15:python3.9-six-1.13.0-2 ################################# [ 41%]
16:libcomps-0.1.15-32_1 ################################# [ 43%]
17:python3.9-libcomps-0.1.15-32_1 ################################# [ 46%]
18:python3.9-dnf-4.2.17-32_4 ################################# [ 49%]
19:python3.9-dnf-plugins-core-4.0.16################################# [ 51%]
20:python3.9-dnf-plugin-migrate-4.0.################################# [ 54%]
21:python3-dnf-4.2.17-32_4 ################################# [ 57%]
22:dnf-4.2.17-32_4 ################################# [ 59%]
23:dnf-automatic-4.2.17-32_4 ################################# [ 62%]
This version of yum4 is a soft link to dnf and all the yum commands are dnf commands.
Repositories present in yum.conf is being used for dnf.
Trying to create pkg_yumdb database required for migrate plugin
Successfully created pkg_yumdb database
24:yum-4.2.17-32_4 ################################# [ 65%]
25:python3-dnf-plugin-migrate-4.0.16################################# [ 68%]
26:python3-dnf-plugins-core-4.0.16-3################################# [ 70%]
27:python3-libcomps-0.1.15-32_1 ################################# [ 73%]
28:python3-six-1.13.0-2 ################################# [ 76%]
29:python3-librepo-1.11.0-32_2 ################################# [ 78%]
30:python3-dateutil-2.8.0-2 ################################# [ 81%]
31:python3-gpg-1.13.1-32_3 ################################# [ 84%]
32:python3-hawkey-0.39.1-32_3 ################################# [ 86%]
33:python3-libdnf-0.39.1-32_3 ################################# [ 89%]
34:rpm-python3-4.15.1-32_2 ################################# [ 92%]
35:ca-certificates-2023.2.60-0 ################################# [ 95%]
Cleaning up / removing...
36:yum-3.4.3-8 warning: /opt/freeware/etc/yum/yum.conf saved as /opt/freeware/etc/yum/yum.conf.rpmsave
################################# [ 97%]
37:ca-certificates-2021.2.52-3 ################################# [100%]
dnf installed successfully.
Please run 'dnf update' to update packages to the latest level.
Please note, RPM packages are downloaded in dnf cache /var/cache/dnf.
RPM packages install files go under the path /opt.
Hence it is recommended to always keep at least 512MB of free space in /var & /opt
to avoid any download and installation/update failures.
Trying to run 'dnf migrate' to migrate yum database to dnf.
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (60): SSL peer certificate or SSH remote key was not OK for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
+ [[ 0 -eq 0 ]]
+ cd -
+ 1> /dev/null 2>& 1
+ rm -rf /tmp/dnf-20231023114749
+ exit 0
root@apaai001:/tmp/derouet #
root@apaai001:/tmp/derouet #
------------------------------
christophe derouet
Original Message:
Sent: Fri October 06, 2023 03:27 AM
From: Andrey Klyachkin
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hi Christophe,
I can't say why you get the error with the scripts, but you can export PERL_LWP_SSL_VERIFY_HOSTNAME=0 and it should switch off SSL certificate checking in lwp-download. The script should work then.
------------------------------
Andrey Klyachkin
https://www.power-devops.com
Original Message:
Sent: Thu October 05, 2023 07:13 AM
From: christophe derouet
Subject: YUM to DNF migration / Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Hello,
I am sorry i suppose it is a very common error but here is the message returned when trying to migrate from YUM to DNF.
root@apaai001:/tmp/derouet # ./dnf_aixtoolbox.sh -y
Attempting download of dnf_bundle_aix_71_72.tar ...
lwp-download: 500 Can't connect to public.dhe.ibm.com:443 (certificate verify failed)
Failed to download dnf_bundle_aix_71_72.tar
root@apaai001:/tmp/derouet #
From this AIX lpar i was able to reinstall the rpm package test-dummy directly from the IBM site.
So i do not understand why we can re-install a package "test-dummy" from IBM site
and why we cannot run "./dnf_aixtoolbox.sh -y" script ?
Did we missed something ?
Do we have to check certificates ?
We thank you very much for your help,
root@apaai001:/tmp/derouet # yum reinstall test-dummy
Setting up Reinstall Process
Resolving Dependencies
--> Running transaction check
---> Package test-dummy.ppc 0:1.1-5 will be reinstalled
--> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================================================
Package Arch Version Repository Size
=============================================================================================================================================================
Reinstalling:
test-dummy ppc 1.1-5 AIX_Toolbox 863
Transaction Summary
=============================================================================================================================================================
Reinstall 1 Package
Total download size: 863
Installed size: 863
Is this ok [y/N]: y
Downloading Packages:
test-dummy-1.1-5.aix6.1.ppc.rpm | 863 B 00:00:00
Running Transaction Check
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : test-dummy-1.1-5.ppc 1/2
Cleanup : test-dummy 2/2
Installed:
test-dummy.ppc 0:1.1-5
Complete!
root@apaai001:/tmp/derouet #
root@apaai001:/tmp/derouet #
root@apaai001:/tmp/derouet #
root@apaai001:/tmp/derouet # cat /opt/freeware/etc/yum/yum.conf
[main]
cachedir=/var/cache/yum
keepcache=1
debuglevel=2
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
plugins=1
[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
#baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox/
sslcacert=/var/ssl/certs/ca-bundle.crt
enabled=1
gpgcheck=0
[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
#baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_noarch/
sslcacert=/var/ssl/certs/ca-bundle.crt
enabled=1
gpgcheck=0
[AIX_Toolbox_71]
name=AIX 7.1 specific repository
#baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_71/
enabled=0
gpgcheck=0
[AIX_Toolbox_72]
name=AIX 7.2 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/
#baseurl=http://apaai001-bck.server.lan/yum/AIX_Toolbox_72/
sslcacert=/var/ssl/certs/ca-bundle.crt
enabled=1
gpgcheck=0
root@apaai001:/tmp/derouet #
------------------------------
christophe derouet
------------------------------