efa-project.org

here is the error i got:
Starting update to E.F.A. 3.0.1.6
[EFA] Good you are root
Beginning System Backup at 01162017 204718
Backup Completed at 01162017 204721
Loaded plugins: fastestmirror, security
Cleaning repos: EFA base epel extras updates
Cleaning up Everything
Cleaning up list of fastest mirrors
Loaded plugins: fastestmirror, security
Setting up Update Process
Determining fastest mirrors
Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: Peer cert cannot be verified or peer cert invalid
Update to Version 3.0.1.6 FAILED. Updates cancelled.
Please visit http://www.efa-project.org for more information.
Loaded plugins: fastestmirror, security
Setting up Update Process
Loading mirror speeds from cached hostfile
Error: Cannot retrieve metalink for repository: epel. Please verify its path and try again
Could not retrieve mirrorlist https://dl.efa-project.org/rpm/mirrors-efa error was
14: Peer cert cannot be verified or peer cert invalid
/tmp/EFA-Staging/EFA-Update-3.0.1.6-3.0.1.7.tar.gz: No such file or directory
sendmail: fatal: root(0): No recipient addresses found in message header
Update to Version 3.0.1.7 FAILED. Updates cancelled.
Please visit http://www.efa-project.org for more information.
/var/EFA/update/EFA-update-script died with exit status 1
Press [Enter] key to continue...

Are you behind a firewall or content filter that may be interfering with the download?

I am behind NAT only and use OpenDNS. I was able to copy the request to my desktop and fetch the https mirror list requested.

SSL Labs test is ok (b):
https://www.ssllabs.com/ssltest/analyze ... roject.org

wget error has a bit more detail:
[admin@spam ~]$ wget https://dl.efa-project.org/rpm/mirrors-efa
--2017-01-17 09:39:49-- https://dl.efa-project.org/rpm/mirrors-efa
Resolving dl.efa-project.org... 188.165.135.228, 2001:41d0:2:524b::228
Connecting to dl.efa-project.org|188.165.135.228|:443... connected.
ERROR: cannot verify dl.efa-project.org’s certificate, issued by “/C=BE/O=GlobalSign nv-sa/CN=AlphaSSL CA - SHA256 - G2”:
Unable to locally verify the issuer’s authority.
To connect to dl.efa-project.org insecurely, use ‘--no-check-certificate’.


openssl s_client -connect dl.efa-project.org:443 -debug:
Verify return code: 20 (unable to get local issuer certificate)

After some more digging i was able to run this as root "update-ca-trust force-enable" and complete the updates. LOVE EFA by the way. Great job, sorry for my limited knowledge of Linux.