[SOLVED] Upgrade 3.0.0.7 to 3.0.0.8 Failed: Problem with SSL CA cert

[Sephiroth]

Hi!

I wanted to upgrade to version 3.0.0.8 and it failed after the backup step with an SSL CA Error:

Starting update to E.F.A. 3.0.0.8
[EFA] Good you are root
Beginning System Backup at 07222015 124504
Backup Completed at 07222015 124507
curl: (77) Problem with the SSL CA cert (path? access rights?)
error: https://dl.fedoraproject.org/pub/epel/R ... KEY-EPEL-6: import read failed(2).
Update to Version 3.0.0.8 FAILED. Updates cancelled.
Please visit http://www.efa-project.org for more information.
sendmail: fatal: root(0): No recipient addresses found in message header
All done
If your system does not return to a command prompt
you can now safely press ctrl-c to abort logsave
Thank you for using E.F.A.


Can anyone help? I'm pretty bad with Linux

Regards

Philippe

[shawniverson]

Can you execute the following command?

Code: Select all

sudo rpm --import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-6

[Sephiroth]

Here's what I get:

curl: (77) Problem with the SSL CA cert (path? access rights?)
error: https://dl.fedoraproject.org/pub/epel/R ... KEY-EPEL-6: import read failed(2).

[shawniverson]

Try updating your ca-certificates:

Code: Select all

sudo yum update ca-certificates

[Sephiroth]

sudo yum update ca-certificates
[sudo] password for .....:
Loaded plugins: fastestmirror, security
Setting up Update Process
Loading mirror speeds from cached hostfile
* base: mirror.switch.ch
* extras: mirror.switch.ch
* rpmforge: mirror1.hs-esslingen.de
* updates: mirror.switch.ch
Resolving Dependencies
--> Running transaction check
---> Package ca-certificates.noarch 0:2014.1.98-65.1.el6 will be updated
---> Package ca-certificates.noarch 0:2015.2.4-65.0.1.el6_6 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
Package Arch Version Repository Size
================================================================================
Updating:
ca-certificates noarch 2015.2.4-65.0.1.el6_6 updates 1.3 M

Transaction Summary
================================================================================
Upgrade 1 Package(s)

Total download size: 1.3 M
Is this ok [y/N]: y
Downloading Packages:
ca-certificates-2015.2.4-65.0.1.el6_6.noarch.rpm | 1.3 MB 00:00
error: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID c105b9de: BAD


Problem opening package ca-certificates-2015.2.4-65.0.1.el6_6.noarch.rpm

[shawniverson]

Hmm, your GPG key appears to be bad for your CentOS repo, or something is altering your data in transit.

[Sephiroth]

This doesen't sound all too good :/

[darky83]

Softokn bug? (although I have not seen it before on EFA)

from: https://www.centos.org/forums/viewtopic ... 13&t=50624

Code: Select all

wget http://mirror.centos.org/centos/6/updates/x86_64/Packages/nss-softokn-freebl-3.14.3-19.el6_6.x86_64.rpm
rpm2cpio nss-softokn-freebl-3.14.3-19.el6_6.x86_64.rpm | cpio -idmv
cd lib64
cp libfreeblpriv3.* /lib64
yum update

Had this on an other system early this year, but never saw it on eFa

[Sephiroth]

It worked!!!!!!!
After running those steps, I could finally upgrade to 3.0.0.8!
Thank you so much!