fedora repo error with yum

Peter Gueckel pgueckel at gmail.com
Sat Nov 12 02:10:38 UTC 2011


Kevin Fenzi wrote:

> Try doing:
> 
> URLGRABBER_DEBUG=1 yum update

This is what I get (edited to exclude rpmfusion):

2011-11-11 19:03:36,668 attempt 1/10: 
https://mirrors.fedoraproject.org/metalink?repo=updates-released-
f16&arch=x86_64
INFO:urlgrabber:attempt 1/10: 
https://mirrors.fedoraproject.org/metalink?repo=updates-released-
f16&arch=x86_64
2011-11-11 19:03:36,668 opening local file 
"/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb
INFO:urlgrabber:opening local file 
"/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
*   Trying 140.211.169.197... * connected
* Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0)
* warning: ignoring unsupported value (1) of ssl.verifyhost
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL 
CA,O="GeoTrust, Inc.",C=US'
* NSS error -8172
* Closing connection #0
* Peer certificate cannot be authenticated with given CA certificates
2011-11-11 19:03:36,920 exception: [Errno 14] Peer cert cannot be verified or 
peer cert invalid
INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert 
invalid
2011-11-11 19:03:36,920 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-
raising
INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
adobe-linux-x86_64                                                                    
2/2
2011-11-11 19:03:37,336 combined options: {
  'text'         : 'fedora/metalink',
  'delegate'     : {
    'bandwidth'    : 0,
    'cache_openers': True,
    'checkfunc'    : None,
    'close_connection': 0,
    'copy_local'   : 0,
    'data'         : None,
    'delegate'     : None,
    'failure_callback': None,
    'ftp_headers'  : None,
    'http_headers' : (),
    'interrupt_callback': None,
    'ip_resolve'   : None,
    'keepalive'    : True,
    'max_header_size': 2097152,
    'opener'       : None,
    'password'     : None,
    'prefix'       : None,
    'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>,
    'proxies'      : None,
    'quote'        : None,
    'range'        : None,
    'reget'        : None,
    'retry'        : 10,
    'retrycodes'   : [-1, 2, 4, 5, 6, 7],
    'size'         : None,
    'ssl_ca_cert'  : None,
    'ssl_cert'     : None,
    'ssl_cert_type': 'PEM',
    'ssl_context'  : None,
    'ssl_key'      : None,
    'ssl_key_pass' : None,
    'ssl_key_type' : 'PEM',
    'ssl_verify_host': True,
    'ssl_verify_peer': True,
    'text'         : None,
    'throttle'     : 0,
    'timeout'      : 30.0,
    'urlparser'    : <urlgrabber.grabber.URLParser instance at 0x2b149e0>,
    'user_agent'   : 'urlgrabber/3.9.1 yum/3.4.3',
    'username'     : None,
    }
  }
DEBUG:urlgrabber:combined options: {
  'text'         : 'fedora/metalink',
  'delegate'     : {
    'bandwidth'    : 0,
    'cache_openers': True,
    'checkfunc'    : None,
    'close_connection': 0,
    'copy_local'   : 0,
    'data'         : None,
    'delegate'     : None,
    'failure_callback': None,
    'ftp_headers'  : None,
    'http_headers' : (),
    'interrupt_callback': None,
    'ip_resolve'   : None,
    'keepalive'    : True,
    'max_header_size': 2097152,
    'opener'       : None,
    'password'     : None,
    'prefix'       : None,
    'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>,
    'proxies'      : None,
    'quote'        : None,
    'range'        : None,
    'reget'        : None,
    'retry'        : 10,
    'retrycodes'   : [-1, 2, 4, 5, 6, 7],
    'size'         : None,
    'ssl_ca_cert'  : None,
    'ssl_cert'     : None,
    'ssl_cert_type': 'PEM',
    'ssl_context'  : None,
    'ssl_key'      : None,
    'ssl_key_pass' : None,
    'ssl_key_type' : 'PEM',
    'ssl_verify_host': True,
    'ssl_verify_peer': True,
    'text'         : None,
    'throttle'     : 0,
    'timeout'      : 30.0,
    'urlparser'    : <urlgrabber.grabber.URLParser instance at 0x2b149e0>,
    'user_agent'   : 'urlgrabber/3.9.1 yum/3.4.3',
    'username'     : None,
    }
  }
2011-11-11 19:03:37,337 attempt 1/10: 
https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64
INFO:urlgrabber:attempt 1/10: 
https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64
2011-11-11 19:03:37,338 opening local file 
"/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb
INFO:urlgrabber:opening local file 
"/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
*   Trying 140.211.169.197... * connected
* Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0)
* warning: ignoring unsupported value (1) of ssl.verifyhost
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL 
CA,O="GeoTrust, Inc.",C=US'
* NSS error -8172
* Closing connection #0
* Peer certificate cannot be authenticated with given CA certificates
2011-11-11 19:03:37,589 exception: [Errno 14] Peer cert cannot be verified or 
peer cert invalid
INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert 
invalid
2011-11-11 19:03:37,589 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-
raising
INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
Error: Cannot retrieve repository metadata (repomd.xml) for repository: fedora. 
Please verify its path and try again

*

I don't understand all this stuff, but it appears that the Canadian mirrors are 
using untrusted certificates. Am I correct?

How can I use a different mirror?



More information about the users mailing list