AIX Open Source

 View Only

  • 1.  yum update getting TLS connect error on the AIX servers

    Posted 5 days ago
    Reply

    Hi,

    We use yum update to update all the Linux toolbox packages on AIX7.2.

    This has been working perfectly until yesterday, and all our servers are displaying the following error, when I run "yum update"

    # yum update
    https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#35 - "TLS connect error: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed"
    Trying other mirror.
    Error: Cannot retrieve repository metadata (repomd.xml) for repository: AIX_Toolbox. Please verify its path and try again
    yum repolist gives similar error:
    # yum repolist
    https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml: [Errno 14] curl#35 - "TLS connect error: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed"
    Trying other mirror.
    repo id repo name statusAIX_Toolbox AIX generic repository 0
    AIX_Toolbox_72 AIX 7.2 specific repository 0
    AIX_Toolbox_noarch AIX noarch repository 0
    repolist: 0
    I have verified our firewall access to the above URL with wget and curl and everything looks good. It almost seems like the cert that is used by yum update/curl has expired, but I don't know which cert file it uses and where to get it from if it expired. 
    Does anyone know, what I am missing here?  All our AIX servers use the same yum.conf file. 
    Thank you!



    ------------------------------
    Prakash Gollapalli
    ------------------------------


  • 2.  RE: yum update getting TLS connect error on the AIX servers

    Posted 3 days ago
    Reply

    Hi Prakash

    Have you verified with "openssl s_client -connect public.dhe.ibm.com:443" command ?

    Can you send me the output of above command ?



    ------------------------------
    SANGAMESH
    ------------------------------

    Original Message


Related Content