dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

5. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Thu May 12, 2022 04:42 AM

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson
------------------------------

Original Message

6. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Thu July 07, 2022 09:34 AM

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson
------------------------------

Original Message

7. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Thu July 07, 2022 09:39 AM

Hi

Seems something went wrong.

This worked:
curl --cacert DigiCert_Global_Root_CA.crt https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Using truss -f curl "https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/"

Regards

------------------------------
Jan Robinson
------------------------------

Original Message

8. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Fri July 08, 2022 02:10 AM

Hi All

Regrets. My fix in the post yesterday was short lived. Still do not know why it worked for a short while after updating.

After this the curl error 56 was back.

dnf clean metadata ;dnf --refresh makecache

Updated to:

==============================================================================================================
 Package                      Architecture     Version                      Repository                   Size
==============================================================================================================
Upgrading:
 librepo                      ppc              1.11.0-100                   AIX_Toolbox                 440 k
 python3-librepo              ppc              1.11.0-100                   AIX_Toolbox                 326 k
 dnf                          ppc              4.2.17-32_50                 AIX_Toolbox_71               14 k
 dnf-automatic                ppc              4.2.17-32_50                 AIX_Toolbox_71               12 k
 dnf-data                     ppc              4.2.17-32_50                 AIX_Toolbox_71               24 k
 libdnf                       ppc              0.39.1-32_50                 AIX_Toolbox_71              2.3 M
 python3-dnf                  ppc              4.2.17-32_50                 AIX_Toolbox_71              193 k
 python3-hawkey               ppc              0.39.1-32_50                 AIX_Toolbox_71              405 k
 python3-libdnf               ppc              0.39.1-32_50                 AIX_Toolbox_71              2.2 M
Installing dependencies:
 gpgme                        ppc              1.13.1-100                   AIX_Toolbox                 518 k
 python3-gpg                  ppc              1.13.1-100                   AIX_Toolbox                 744 k
     replacing  python3-gpgme.ppc 1.13.1-32_1

Error

dnf clean metadata;dnf --refresh makecache
Cache was expired
0 files removed
AIX generic repository                                                                                 0.0  B/s |   0  B     00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
  - Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Doing it manually works:

 #curl --output repomd.xml anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2712  100  2712    0     0   2100      0  0:00:01  0:00:01 --:--:--  2102

Now DNF needs to be uninstalled and the initial version installed.
At least the curl error 60 is solved.

Regards.

------------------------------
Jan Robinson
------------------------------

Original Message

9. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Fri July 08, 2022 02:40 AM

Hi All

Reverting back to old version of dnf works.

Note: We use a proxy with username/password.

Working set:

Skipping ca-certificates-2020.06.01-0 as higher version ca-certificates-2021.2.52-1.ppc is installed.
dnf-4.2.17-32_2 will be installed
dnf-automatic-4.2.17-32_2 will be installed
dnf-data-4.2.17-32_2 will be installed
Skipping libcomps-0.1.11-32_1 as higher version libcomps-0.1.11-100.ppc is installed.
libdnf-0.39.1-32_2 will be installed
Skipping libmodulemd-1.5.2-32_2 as higher version libmodulemd-1.5.2-100.ppc is installed.
librepo-1.11.0-32_1 will be installed
Skipping libsmartcols-2.34-32_1 as higher version libsmartcols-2.34-100.ppc is installed.
Skipping libsolv-0.7.9-32_1 as higher version libsolv-0.7.9-32_51.ppc is installed.
Skipping libzstd-1.4.4-32_1 as higher version libzstd-1.4.4-100.ppc is installed.
Skipping p11-kit-0.23.16-0 as higher version p11-kit-0.23.22-1.ppc is installed.
Skipping p11-kit-tools-0.23.16-0 as higher version p11-kit-tools-0.23.22-1.ppc is installed.
Skipping python3-3.7.9-0 as higher version python3-3.7.12-1.ppc is installed.
python3-dnf-4.2.17-32_2 will be installed
python3-gpgme-1.13.1-32_1 will be installed
python3-hawkey-0.39.1-32_2 will be installed
Skipping python3-libcomps-0.1.11-32_1 as higher version python3-libcomps-0.1.11-100.ppc is installed.
python3-libdnf-0.39.1-32_2 will be installed
python3-librepo-1.11.0-32_1 will be installed
rpm-python3-4.15.1-32_1 is already installed
Skipping zchunk-libs-1.1.4-32_1 as higher version zchunk-libs-1.1.4-101.ppc is installed.

Installing the packages...

Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:librepo-1.11.0-32_1              ################################# [ 10%]
   2:libdnf-0.39.1-32_2               ################################# [ 20%]
   3:python3-libdnf-0.39.1-32_2       ################################# [ 30%]
   4:python3-hawkey-0.39.1-32_2       ################################# [ 40%]
   5:python3-gpgme-1.13.1-32_1        ################################# [ 50%]
   6:dnf-data-4.2.17-32_2             ################################# [ 60%]
   7:python3-dnf-4.2.17-32_2          ################################# [ 70%]
   8:dnf-4.2.17-32_2                  ################################# [ 80%]
   9:dnf-automatic-4.2.17-32_2        ################################# [ 90%]
  10:python3-librepo-1.11.0-32_1      ################################# [100%]

dnf installed successfully.
Please run 'dnf update' to update packages to the latest level.

Regards.

------------------------------
Jan Robinson
------------------------------

Original Message

Original Message:
Sent: Fri July 08, 2022 02:09 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Regrets. My fix in the post yesterday was short lived. Still do not know why it worked for a short while after updating.

After this the curl error 56 was back.

dnf clean metadata ;dnf --refresh makecache

Updated to:

============================================================================================================== Package                      Architecture     Version                      Repository                   Size==============================================================================================================Upgrading: librepo                      ppc              1.11.0-100                   AIX_Toolbox                 440 k python3-librepo              ppc              1.11.0-100                   AIX_Toolbox                 326 k dnf                          ppc              4.2.17-32_50                 AIX_Toolbox_71               14 k dnf-automatic                ppc              4.2.17-32_50                 AIX_Toolbox_71               12 k dnf-data                     ppc              4.2.17-32_50                 AIX_Toolbox_71               24 k libdnf                       ppc              0.39.1-32_50                 AIX_Toolbox_71              2.3 M python3-dnf                  ppc              4.2.17-32_50                 AIX_Toolbox_71              193 k python3-hawkey               ppc              0.39.1-32_50                 AIX_Toolbox_71              405 k python3-libdnf               ppc              0.39.1-32_50                 AIX_Toolbox_71              2.2 MInstalling dependencies: gpgme                        ppc              1.13.1-100                   AIX_Toolbox                 518 k python3-gpg                  ppc              1.13.1-100                   AIX_Toolbox                 744 k     replacing  python3-gpgme.ppc 1.13.1-32_1

Error

dnf clean metadata;dnf --refresh makecacheCache was expired0 files removedAIX generic repository                                                                                 0.0  B/s |   0  B     00:00Errors during downloading metadata for repository 'AIX_Toolbox':  - Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Doing it manually works:

 #curl --output repomd.xml anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current                                 Dload  Upload   Total   Spent    Left  Speed100  2712  100  2712    0     0   2100      0  0:00:01  0:00:01 --:--:--  2102

Now DNF needs to be uninstalled and the initial version installed.
At least the curl error 60 is solved.

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu July 07, 2022 09:39 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Seems something went wrong.

This worked:
curl --cacert DigiCert_Global_Root_CA.crt https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Using truss -f curl "https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/"

Regards

------------------------------
Jan Robinson

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

10. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Stephan Dietl

Posted Fri July 08, 2022 03:46 AM

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl
------------------------------

Original Message

11. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Fri July 08, 2022 08:03 AM

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson
------------------------------

Original Message

12. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Mon December 12, 2022 12:52 AM

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.conf

proxy_auth_method=basic

------------------------------
Jan Robinson
------------------------------

Original Message

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

13. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

SANKET RATHI

Posted Tue December 20, 2022 12:21 PM

Thank you for informing. This will be helpful for others who will get similar issue.

------------------------------
SANKET RATHI
------------------------------

Original Message

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

14. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 02:24 AM

This is the error with the openssl both 3.0.x and 1.1.11, dnf bundle dnf_bundle_aix_71_72_v1.tar 2021-10-29 12:06 168M, and dnf_bundle_aix_71_72.tar 2023-08-08 10:02 208M:

Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30008 milliseconds]

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Tue December 20, 2022 12:21 PM
From: SANKET RATHI
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Thank you for informing. This will be helpful for others who will get similar issue.

------------------------------
SANKET RATHI

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

15. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 02:27 AM

I downgraded the openssl from 3.0.x to 1.1.11, and then tried to install the latest one

dnf_bundle_aix_71_72.tar 2023-08-08 10:02 208M

However after that still not able to use dnf to install any rpm packages.

Please help to fix the issue.

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Tue December 20, 2022 12:21 PM
From: SANKET RATHI
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Thank you for informing. This will be helpful for others who will get similar issue.

------------------------------
SANKET RATHI

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

16. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 02:26 AM

On my machine now, it has the following rpm packages installed:

# rpm -qa
tcl-8.4.7-3.ppc
python3-3.7.9-0.ppc
libmodulemd-1.5.2-32_1.ppc
libsmartcols-2.34-32_1.ppc
librepo-1.11.0-32_1.ppc
libdnf-0.39.1-32_1.ppc
dnf-data-4.2.17-32_1.noarch
libcomps-0.1.11-32_1.ppc
python3-gpgme-1.13.1-32_1.ppc
dnf-4.2.17-32_1.noarch
p11-kit-tools-0.23.16-0.ppc
dnf-automatic-4.2.17-32_1.noarch
python3-librepo-1.11.0-32_1.ppc
tk-8.4.7-3.ppc
expect-5.42.1-3.ppc
AIX-rpm-7.2.4.1-3.ppc
libzstd-1.4.4-32_1.ppc
libsolv-0.7.9-32_1.ppc
zchunk-libs-1.1.4-32_1.ppc
rpm-python3-4.15.1-32_1.ppc
python3-libdnf-0.39.1-32_1.ppc
python3-hawkey-0.39.1-32_1.ppc
python3-libcomps-0.1.11-32_1.ppc
python3-dnf-4.2.17-32_1.noarch
p11-kit-0.23.16-0.ppc
ca-certificates-2020.06.01-0.ppc
yum-4.2.17-32_1.noarch

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

17. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 02:28 AM

Hi Jan,

I got the same issue on AIX7.2 with the latest openssl installed. When running dnf_aixtoolbox.sh, it showed those errors,

I managed to get the packages installed by manually download the tar ball, and in the script to copy the tar ball to the script needed subdir, then it installed the packages. But the issue I have now is if I try to install bash by "dnf install gcc", it gives the same error. Tried your fix by adding the

proxy_auth_method=basic

To

/opt/freeware/etc/dnf/dnf.conf

the error I got is still the same:

# ./dnf install gcc
AIX generic repository 0.0 B/s | 0 B 02:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30004 milliseconds]
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30002 milliseconds]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Please help.

Thanks.

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

18. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Jan Robinson

Posted Tue October 03, 2023 03:18 AM

Hello Roger,

to clarify, myself is an IBM customer.

Are you sure your proxy settings are correctly set to reach the internet

HTTPS_PROXY [protocol://]<host>[:port]
              Sets the proxy server to use for HTTPS.

See bottom of the man page URL:
https://man7.org/linux/man-pages/man1/curl.1.html

If you are sure the proxy settings are correct and you have wget installed, try the below command to test the proxy.

wget anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml

Else, I think it will be good if you start a new topic with your question.

Error 28 is not the same as error 56.

Good luck!

------------------------------
Jan Robinson
------------------------------

Original Message

Original Message:
Sent: Mon October 02, 2023 06:30 PM
From: Roger Gong
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I got the same issue on AIX7.2 with the latest openssl installed. When running dnf_aixtoolbox.sh, it showed those errors,

I managed to get the packages installed by manually download the tar ball, and in the script to copy the tar ball to the script needed subdir, then it installed the packages. But the issue I have now is if I try to install bash by "dnf install gcc", it gives the same error. Tried your fix by adding the

proxy_auth_method=basic

To

/opt/freeware/etc/dnf/dnf.conf

the error I got is still the same:

# ./dnf install gcc
AIX generic repository 0.0 B/s | 0 B 02:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30004 milliseconds]
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30002 milliseconds]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Please help.

Thanks.

------------------------------
Roger Gong

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

19. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 05:21 AM

Hi Jan,

Thanks for the response. I have no proxy in the environment, from the machine I confirmed it can ping the server public.dhe.ibm.com. But as the dnf is not working, I can't have wget installed.

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Tue October 03, 2023 03:17 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Roger,

to clarify, myself is an IBM customer.

Are you sure your proxy settings are correctly set to reach the internet

HTTPS_PROXY [protocol://]<host>[:port]              Sets the proxy server to use for HTTPS.

See bottom of the man page URL:
https://man7.org/linux/man-pages/man1/curl.1.html

If you are sure the proxy settings are correct and you have wget installed, try the below command to test the proxy.

wget anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml

Else, I think it will be good if you start a new topic with your question.

Error 28 is not the same as error 56.

Good luck!

------------------------------
Jan Robinson

Original Message:
Sent: Mon October 02, 2023 06:30 PM
From: Roger Gong
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I got the same issue on AIX7.2 with the latest openssl installed. When running dnf_aixtoolbox.sh, it showed those errors,

I managed to get the packages installed by manually download the tar ball, and in the script to copy the tar ball to the script needed subdir, then it installed the packages. But the issue I have now is if I try to install bash by "dnf install gcc", it gives the same error. Tried your fix by adding the

proxy_auth_method=basic

To

/opt/freeware/etc/dnf/dnf.conf

the error I got is still the same:

# ./dnf install gcc
AIX generic repository 0.0 B/s | 0 B 02:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30004 milliseconds]
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30002 milliseconds]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Please help.

Thanks.

------------------------------
Roger Gong

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

20. RE: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Like

Roger Gong

Posted Tue October 03, 2023 05:22 AM

Hi Jan,

I found the issue that blocks the connection to the site (I used ssh to test from the AIX VM to my local other Linux VMs, and found ping works but ssh not, so suspect it's the firewall rules caused) is caused by not properly setup the firewall rules on the Linux host as my AIX7.2 is running in a qemu env. After setting the firewall rules, now I can use yum to install gcc and others. Thanks.

------------------------------
Roger Gong
------------------------------

Original Message

Original Message:
Sent: Tue October 03, 2023 03:17 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Roger,

to clarify, myself is an IBM customer.

Are you sure your proxy settings are correctly set to reach the internet

HTTPS_PROXY [protocol://]<host>[:port]              Sets the proxy server to use for HTTPS.

See bottom of the man page URL:
https://man7.org/linux/man-pages/man1/curl.1.html

If you are sure the proxy settings are correct and you have wget installed, try the below command to test the proxy.

wget anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml

Else, I think it will be good if you start a new topic with your question.

Error 28 is not the same as error 56.

Good luck!

------------------------------
Jan Robinson

Original Message:
Sent: Mon October 02, 2023 06:30 PM
From: Roger Gong
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I got the same issue on AIX7.2 with the latest openssl installed. When running dnf_aixtoolbox.sh, it showed those errors,

I managed to get the packages installed by manually download the tar ball, and in the script to copy the tar ball to the script needed subdir, then it installed the packages. But the issue I have now is if I try to install bash by "dnf install gcc", it gives the same error. Tried your fix by adding the

proxy_auth_method=basic

To

/opt/freeware/etc/dnf/dnf.conf

the error I got is still the same:

# ./dnf install gcc
AIX generic repository 0.0 B/s | 0 B 02:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30004 milliseconds]
- Curl error (28): Timeout was reached for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Connection timed out after 30002 milliseconds]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Please help.

Thanks.

------------------------------
Roger Gong

Original Message:
Sent: Mon December 12, 2022 12:52 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello All.

The curl error 56 was solved by adding this line to:

/opt/freeware/etc/dnf/dnf.confproxy_auth_method=basic

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 08:02 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Stephan.

Have updated to your suggestion and c_rehash works, great, thank you.
Were on openssl.base 1.1.1.1200

openssh.base.client 8.1.112.1201 COMMITTED Open Secure Shell Commands
openssh.base.server 8.1.112.1201 COMMITTED Open Secure Shell Server
openssl.base 1.1.1.1201 COMMITTED Open Secure Socket Layer

Now for the curl 56 error on the suggested upgrade of dnf to:

dnf-4.2.17-32_50

Found a hit that suggested a space in the URL, for error 56, but that is not easy to investigate here.

Regards,

------------------------------
Jan Robinson

Original Message:
Sent: Fri July 08, 2022 03:45 AM
From: Stephan Dietl
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello @Jan Robinson !

Your error sounds a lot like the breakage I experienced when a new OpenSSL version and new certificates came together:

https://community.ibm.com/community/user/power/communities/community-home/digestviewer/viewthread?GroupId=6211&MessageKey=e49c17f8-a616-42e6-99c8-42fcac08fa9f&CommunityKey=10c1d831-47ee-4d92-a138-b03f7896f7c9&ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fCommunityKey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9#bme49c17f8-a616-42e6-99c8-42fcac08fa9f

and

https://community.ibm.com/community/user/power/discussion/certificate-issue?ReturnUrl=%2fcommunity%2fuser%2fpower%2fcommunities%2fcommunity-home%2fdigestviewer%3fcommunitykey%3d10c1d831-47ee-4d92-a138-b03f7896f7c9

Which version of OpenSSL are you using? openssl.base 1.1.1.1201 fixed the issue with c_rehash!

"

Posted 9 days ago

Latest fix for openssl (1.1.1.1201) made c_rehash work again as it should.

------------------------------
Philip Krab
------------------------------

"

HTH,

With kind regards,

------------------------------
Stephan Dietl

Original Message:
Sent: Thu July 07, 2022 09:34 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi

Just an update to share a procedure that worked for me:
There were no <hash>.0 files in /var/ssl/certs.

Using truss -f curl anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

showed this:

14156258: 27066733: statx("/var/ssl/certs//e83d98dd.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//3513523f.0", 0x0FFFFFFFFFFFE440, 176, 0) Err#2 ENOENT

14156258: 27066733: statx("/var/ssl/certs//82585ccb.0", 0x0FFFFFFFFFFFE300, 176, 0) Err#2 ENOENT

This worked:
curl --cacert DigiCert_Global_Root_CA.crt anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/

Then for fun and profit.... this:

# https://www.ibm.com/support/pages/ibm-aix-import-ca-certificate
#

cd /var/ssl/certs

for i in $(ls *.crt)
do

ln -s $i $(openssl x509 -hash -noout -in $i).0

done

Regards.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 12, 2022 04:41 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hello Sangamesh

Un setting the https_proxy and setting http_proxy resulted in:

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (6): Couldn't resolve host name for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Could not resolve host: public.dhe.ibm.com]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository

Un setting both and adding it to /opt/freeware/etc/dnf/dnf.conf
###
sslverify=false
proxy=http://proxy.myco:8080
proxy_username=myuser
proxy_password=mypasswd
###

Causes the old error:
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Nothing has changed.

Thanks so much.

------------------------------
Jan Robinson

Original Message:
Sent: Tue May 10, 2022 11:08 AM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

Could you check if unsetting the https_proxy and setting http_proxy works ?

------------------------------
SANGAMESH

Original Message:
Sent: Fri May 06, 2022 02:01 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Sangamesh

It is seen in both instances:

1. after installing dnf from the bundle, then librepo
2. after installing dnf from the bundle, then dnf update

All three AIX installations 2 x 7.2 and 1 x 7.1.

Just redid the above for fun: wiped dnf, step 1 and 2

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:05
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX noarch repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_noarch':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_noarch': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
AIX 7.2 specific repository 0.0 B/s | 0 B 00:04
Errors during downloading metadata for repository 'AIX_Toolbox_72':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.2/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox_72': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Ignoring repositories: AIX_Toolbox, AIX_Toolbox_noarch, AIX_Toolbox_72
Metadata cache created.

------------------------------
Jan Robinson

Original Message:
Sent: Thu May 05, 2022 02:06 PM
From: SANGAMESH MALLAYYA
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi Jan,

I don't see any error with just update of librepo after setting up the dnf from dnf bundle.
However, I haven't checked with proxy if that's an issue.

Do you see the same error with "dnf update" after installing dnf from the bundle not just librepo ?

------------------------------
SANGAMESH

Original Message:
Sent: Thu May 05, 2022 01:46 AM
From: Jan Robinson
Subject: dnf: upgrade to librepo-1.11.0-100.ppc breaks curl - Curl error (56) - on AIX 7.1/7.2

Hi All

Yesterday, after ugrading dnf (fnf upgrade dnf) curl could not download ANY other RPM due to a curl error.

Sample error for all repositories.

dnf --refresh makecache
AIX generic repository 0.0 B/s | 0 B 00:00
Errors during downloading metadata for repository 'AIX_Toolbox':
- Curl error (56): Failure when receiving data from the peer for anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml">https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/repodata/repomd.xml [Empty reply from server]
Error: Failed to download metadata for repo 'AIX_Toolbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Then:

undo changes and reinstall dnf - dnf works - dnf-4.2.17-32_2.noarch
Only update to librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc
dnf gave Curl error (56)

We use environment variables for the proxy:
http_proxy=
https_proxy=

The only package update that broke curl was:
librepo-1.11.0-100.ppc python3-librepo-1.11.0-100.ppc

Unless something else should have been done that was missed.

Please advise.

dnf.conf

[main]
cachedir=/var/cache/dnf
keepcache=1
debuglevel=2
logfile=/var/log/dnf.log
obsoletes=1
plugins=1
gpgcheck=1
installonly_limit=3
clean_requirements_on_remove=True
best=True
skip_if_unavailable=True

[AIX_Toolbox]
name=AIX generic repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc/
enabled=1
gpgcheck=0

[AIX_Toolbox_noarch]
name=AIX noarch repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/noarch/
enabled=1
gpgcheck=0

[AIX_Toolbox_71]
name=AIX 7.1 specific repository
baseurl=https://anonymous:anonymous@public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/RPMS/ppc-7.1/
enabled=1
gpgcheck=0

------------------------------
Regards
Jan Robinson
------------------------------

AIX Open Source