Page 1 of 1
3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 16:56
by ressel
Hello,
Im trying to upgrade to 3.0.9, but get this error.
[Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
What to do?
Code: Select all
Determining fastest mirrors
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
* base: mirror.de.leaseweb.net
* epel: mirror.23media.de
* extras: ftp.plusline.de
* updates: ftp.plusline.de
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again
Update to Version 3.0.0.9 FAILED. Updates cancelled.
Please visit http://www.efa-project.org for more information.
sendmail: fatal: root(0): No recipient addresses found in message header
All done
Please restart your system as soon as possible.
If your system does not return to a command prompt
you can now safely press ctrl-c to abort logsave
Thank you for using E.F.A.
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:22
by shawniverson
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:28
by ressel
shawniverson wrote:Try this:
Gives me:
Code: Select all
$ sudo yum update ca-certificates
Indlæste udvidelsesmoduler: fastestmirror, security
Opsætning af opdateringsprocessen
Loading mirror speeds from cached hostfile
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
epel/metalink | 26 kB 00:00
* base: mirror.de.leaseweb.net
* epel: mirror.23media.de
* extras: ftp.plusline.de
* updates: ftp.plusline.de
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:38
by shawniverson
Oh yeah...may need to do this...
Try this...
Code: Select all
sudo yum --disablerepo=EFA update ca-certificates
sudo yum --enablerepo=EFA clean all
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:44
by ressel
shawniverson wrote:Oh yeah...may need to do this...
Try this...
Code: Select all
sudo yum --disablerepo=EFA update ca-certificates
sudo yum --enablerepo=EFA clean all
Hello again,
I just did that, then tried to run update again, and still same error.
Code: Select all
$ sudo yum --disablerepo=EFA update ca-certificates
Indlæste udvidelsesmoduler: fastestmirror, security
Opsætning af opdateringsprocessen
Loading mirror speeds from cached hostfile
epel/metalink | 26 kB 00:00
* base: mirror.de.leaseweb.net
* epel: mirror.23media.de
* extras: ftp.plusline.de
* updates: ftp.plusline.de
base | 3.7 kB 00:00
base/primary_db | 4.6 MB 00:00
epel | 4.3 kB 00:00
epel/primary_db | 5.8 MB 00:00
extras | 3.4 kB 00:00
extras/primary_db | 34 kB 00:00
updates | 3.4 kB 00:00
updates/primary_db | 4.0 MB 00:00
Ingen pakker markeret til opdatering
$ sudo yum --enablerepo=EFA clean all
Indlæste udvidelsesmoduler: fastestmirror, security
Cleaning repos: EFA base epel extras updates
Oprydning af alt
Cleaning up list of fastest mirrors
$ sudo /usr/local/sbin/EFA-Update -update
....
Determining fastest mirrors
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
* base: mirror.23media.de
* epel: mirror.23media.de
* extras: centos.mirrors.psw.services
* updates: mirror.imt-systems.com
https://dl.efa-project.org/rpm/CentOS/6/x86_64/repodata/repomd.xml: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Prøver et andet filspejl.
Fejl: Cannot retrieve repository metadata (repomd.xml) for repository: EFA. Please verify its path and try again
Update to Version 3.0.0.9 FAILED. Updates cancelled.
Please visit http://www.efa-project.org for more information.
sendmail: fatal: root(0): No recipient addresses found in message header
All done
Please restart your system as soon as possible.
If your system does not return to a command prompt
you can now safely press ctrl-c to abort logsave
Thank you for using E.F.A.
Any hints?
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:47
by shawniverson
Someone in another post put sslverify=false into the repo.
In your case you would put sslverify=false in to /etc/yum.repos.d/EFA.repo.
viewtopic.php?f=13&t=1485
Not sure but I'm betting this is not as secure, just a heads up, but may at least get you through the update.
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:57
by ressel
shawniverson wrote:Someone in another post put sslverify=false into the repo.
In your case you would put sslverify=false in to /etc/yum.repos.d/EFA.repo.
viewtopic.php?f=13&t=1485
Not sure but I'm betting this is not as secure, just a heads up, but may at least get you through the update.
Hello,
I have just tried, but when I ran
sudo /usr/local/sbin/EFA-Update -update again the update changed the file again to:
Code: Select all
$ cat /etc/yum.repos.d/EFA.repo
[EFA]
name=EFA-Project
baseurl=https://dl.efa-project.org/rpm/CentOS/6/x86_64
mirrorlist=https://dl.efa-project.org/rpm/mirrors-efa
failovermethod=priority
enabled=1
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 17:59
by shawniverson
Try setting it globally, then
in /etc/yum.conf in the [main] section
After you update, I would remove this and see if maybe the problem is resolved.
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 18:01
by ressel
This helped:
first insert sslverify=false to /etc/yum.repos.d/EFA.repo
then i did
Code: Select all
$ sudo chattr +i /etc/yum.repos.d/EFA.repo
then I run /usr/local/sbin/EFA-Update -update
Now it gave a error on cp /etc/yum.repos.d/EFA.repo, but it just keep on, and now updating all packages.
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 18:12
by ressel
I have now rebooted system after the upgrade, did look successful, but now webserver will not start.
Re: 3.0.9 upgrade - Problem with the SSL CA Cert
Posted: 21 Mar 2016 18:14
by shawniverson
Probably related to your overall SSL/CA problem on your system. I would encourage you to try to find the root of this problem as I'm sure it is not good that you can't verify certs for some reason.
Go in and disable HTTPS in Apache Settings in EFA-Configure.
Restart apache or reboot.