Kevin Fenzi wrote:
> Try doing:
>
> URLGRABBER_DEBUG=1 yum update
This is what I get (edited to exclude rpmfusion):
2011-11-11 19:03:36,668 attempt 1/10:
https://mirrors.fedoraproject.org/metalink?repo=updates-released-
f16&arch=x86_64
INFO:urlgrabber:attempt 1/10:
https://mirrors.fedoraproject.org/metalink?repo=updates-released-
f16&arch=x86_64
2011-11-11 19:03:36,668 opening local file
"/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb
INFO:urlgrabber
pening local file
"/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
* Trying 140.211.169.197... * connected
* Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0)
* warning: ignoring unsupported value (1) of ssl.verifyhost
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL
CA,O="GeoTrust, Inc.",C=US'
* NSS error -8172
* Closing connection #0
* Peer certificate cannot be authenticated with given CA certificates
2011-11-11 19:03:36,920 exception: [Errno 14] Peer cert cannot be verified or
peer cert invalid
INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert
invalid
2011-11-11 19:03:36,920 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-
raising
INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
adobe-linux-x86_64
2/2
2011-11-11 19:03:37,336 combined options: {
'text' : 'fedora/metalink',
'delegate' : {
'bandwidth' : 0,
'cache_openers': True,
'checkfunc' : None,
'close_connection': 0,
'copy_local' : 0,
'data' : None,
'delegate' : None,
'failure_callback': None,
'ftp_headers' : None,
'http_headers' : (),
'interrupt_callback': None,
'ip_resolve' : None,
'keepalive' : True,
'max_header_size': 2097152,
'opener' : None,
'password' : None,
'prefix' : None,
'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>,
'proxies' : None,
'quote' : None,
'range' : None,
'reget' : None,
'retry' : 10,
'retrycodes' : [-1, 2, 4, 5, 6, 7],
'size' : None,
'ssl_ca_cert' : None,
'ssl_cert' : None,
'ssl_cert_type': 'PEM',
'ssl_context' : None,
'ssl_key' : None,
'ssl_key_pass' : None,
'ssl_key_type' : 'PEM',
'ssl_verify_host': True,
'ssl_verify_peer': True,
'text' : None,
'throttle' : 0,
'timeout' : 30.0,
'urlparser' : <urlgrabber.grabber.URLParser instance at 0x2b149e0>,
'user_agent' : 'urlgrabber/3.9.1 yum/3.4.3',
'username' : None,
}
}
DEBUG:urlgrabber:combined options: {
'text' : 'fedora/metalink',
'delegate' : {
'bandwidth' : 0,
'cache_openers': True,
'checkfunc' : None,
'close_connection': 0,
'copy_local' : 0,
'data' : None,
'delegate' : None,
'failure_callback': None,
'ftp_headers' : None,
'http_headers' : (),
'interrupt_callback': None,
'ip_resolve' : None,
'keepalive' : True,
'max_header_size': 2097152,
'opener' : None,
'password' : None,
'prefix' : None,
'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>,
'proxies' : None,
'quote' : None,
'range' : None,
'reget' : None,
'retry' : 10,
'retrycodes' : [-1, 2, 4, 5, 6, 7],
'size' : None,
'ssl_ca_cert' : None,
'ssl_cert' : None,
'ssl_cert_type': 'PEM',
'ssl_context' : None,
'ssl_key' : None,
'ssl_key_pass' : None,
'ssl_key_type' : 'PEM',
'ssl_verify_host': True,
'ssl_verify_peer': True,
'text' : None,
'throttle' : 0,
'timeout' : 30.0,
'urlparser' : <urlgrabber.grabber.URLParser instance at 0x2b149e0>,
'user_agent' : 'urlgrabber/3.9.1 yum/3.4.3',
'username' : None,
}
}
2011-11-11 19:03:37,337 attempt 1/10:
https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64
INFO:urlgrabber:attempt 1/10:
https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64
2011-11-11 19:03:37,338 opening local file
"/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb
INFO:urlgrabber
pening local file
"/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
* Trying 140.211.169.197... * connected
* Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0)
* warning: ignoring unsupported value (1) of ssl.verifyhost
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL
CA,O="GeoTrust, Inc.",C=US'
* NSS error -8172
* Closing connection #0
* Peer certificate cannot be authenticated with given CA certificates
2011-11-11 19:03:37,589 exception: [Errno 14] Peer cert cannot be verified or
peer cert invalid
INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert
invalid
2011-11-11 19:03:37,589 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-
raising
INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
Error: Cannot retrieve repository metadata (repomd.xml) for repository: fedora.
Please verify its path and try again
*
I don't understand all this stuff, but it appears that the Canadian mirrors are
using untrusted certificates. Am I correct?
How can I use a different mirror?
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
fedora repo error with yum
