3.0.9 upgrade - Problem with the SSL CA Cert

[ressel]

Hello,

Im trying to upgrade to 3.0.9, but get this error.

[Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"

What to do?

Code: Select all

Determining fastest mirrors
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
 * base: mirror.de.leaseweb.net
 * epel: mirror.23media.de
 * extras: ftp.plusline.de
 * updates: ftp.plusline.de
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again
Update to Version 3.0.0.9 FAILED.  Updates cancelled.
Please visit http://www.efa-project.org for more information.
sendmail: fatal: root(0): No recipient addresses found in message header
All done
Please restart your system as soon as possible.
If your system does not return to a command prompt
you can now safely press ctrl-c to abort logsave
Thank you for using E.F.A.

[shawniverson]

Try this:

Code: Select all

sudo yum update ca-certificates 

[ressel]

Try this:

Code: Select all

sudo yum update ca-certificates 

Gives me:

Code: Select all

$ sudo yum update ca-certificates
Indlæste udvidelsesmoduler: fastestmirror, security
Opsætning af opdateringsprocessen
Loading mirror speeds from cached hostfile
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
epel/metalink                                                                                                                                                                                                         |  26 kB     00:00
 * base: mirror.de.leaseweb.net
 * epel: mirror.23media.de
 * extras: ftp.plusline.de
 * updates: ftp.plusline.de
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again

[shawniverson]

Oh yeah...may need to do this...

Try this...

Code: Select all

sudo yum --disablerepo=EFA update ca-certificates
sudo yum --enablerepo=EFA clean all

[ressel]

Oh yeah...may need to do this...

Try this...

Code: Select all

sudo yum --disablerepo=EFA update ca-certificates
sudo yum --enablerepo=EFA clean all

Hello again,

I just did that, then tried to run update again, and still same error.

Code: Select all

$ sudo yum --disablerepo=EFA update ca-certificates
Indlæste udvidelsesmoduler: fastestmirror, security
Opsætning af opdateringsprocessen
Loading mirror speeds from cached hostfile
epel/metalink                                                                                                                                                                                                         |  26 kB     00:00
 * base: mirror.de.leaseweb.net
 * epel: mirror.23media.de
 * extras: ftp.plusline.de
 * updates: ftp.plusline.de
base                                                                                                                                                                                                                  | 3.7 kB     00:00
base/primary_db                                                                                                                                                                                                       | 4.6 MB     00:00
epel                                                                                                                                                                                                                  | 4.3 kB     00:00
epel/primary_db                                                                                                                                                                                                       | 5.8 MB     00:00
extras                                                                                                                                                                                                                | 3.4 kB     00:00
extras/primary_db                                                                                                                                                                                                     |  34 kB     00:00
updates                                                                                                                                                                                                               | 3.4 kB     00:00
updates/primary_db                                                                                                                                                                                                    | 4.0 MB     00:00
Ingen pakker markeret til opdatering

$ sudo yum --enablerepo=EFA clean all
Indlæste udvidelsesmoduler: fastestmirror, security
Cleaning repos: EFA base epel extras updates
Oprydning af alt
Cleaning up list of fastest mirrors

$ sudo /usr/local/sbin/EFA-Update -update
....
Determining fastest mirrors
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
 * base: mirror.23media.de
 * epel: mirror.23media.de
 * extras: centos.mirrors.psw.services
 * updates: mirror.imt-systems.com
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again
Update to Version 3.0.0.9 FAILED.  Updates cancelled.
Please visit http://www.efa-project.org for more information.
sendmail: fatal: root(0): No recipient addresses found in message header
All done
Please restart your system as soon as possible.
If your system does not return to a command prompt
you can now safely press ctrl-c to abort logsave
Thank you for using E.F.A.

Any hints?

[shawniverson]

Someone in another post put sslverify=false into the repo.

In your case you would put sslverify=false in to /etc/yum.repos.d/EFA.repo.

viewtopic.php?f=13&t=1485

Not sure but I'm betting this is not as secure, just a heads up, but may at least get you through the update.

[ressel]

Someone in another post put sslverify=false into the repo.

In your case you would put sslverify=false in to /etc/yum.repos.d/EFA.repo.

viewtopic.php?f=13&t=1485

Not sure but I'm betting this is not as secure, just a heads up, but may at least get you through the update.

Hello,

I have just tried, but when I ran sudo /usr/local/sbin/EFA-Update -update again the update changed the file again to:

Code: Select all

$ cat /etc/yum.repos.d/EFA.repo
[EFA]
name=EFA-Project
baseurl=https://dl.efa-project.org/rpm/CentOS/6/x86_64
mirrorlist=https://dl.efa-project.org/rpm/mirrors-efa
failovermethod=priority
enabled=1

[shawniverson]

Try setting it globally, then

in /etc/yum.conf in the [main] section

Code: Select all

sslverify=false

After you update, I would remove this and see if maybe the problem is resolved.

[ressel]

This helped:
first insert sslverify=false to /etc/yum.repos.d/EFA.repo

then i did

Code: Select all

 $ sudo chattr +i /etc/yum.repos.d/EFA.repo 

then I run /usr/local/sbin/EFA-Update -update
Now it gave a error on cp /etc/yum.repos.d/EFA.repo, but it just keep on, and now updating all packages.

[ressel]

I have now rebooted system after the upgrade, did look successful, but now webserver will not start.

[shawniverson]

Probably related to your overall SSL/CA problem on your system. I would encourage you to try to find the root of this problem as I'm sure it is not good that you can't verify certs for some reason.

Go in and disable HTTPS in Apache Settings in EFA-Configure.
Restart apache or reboot.