#36 centpkg new-sources or any use of lookaside cache fails with (60, 'SSL certificate problem: self signed certificate in certificate chain')
Closed 2 years ago by tdawson. Opened 2 years ago by rjones@redhat.com.

$ centpkg new-sources /mnt/scratch/virt-what-1.21.tar.gz*
Could not execute new_sources: (60, 'SSL certificate problem: self signed certificate in certificate chain')
$ centpkg local
Downloading mingw-w64-v8.0.0.tar.bz2
Could not execute local: (60, 'SSL certificate problem: self signed certificate in certificate chain')

There was some stuff in this thread about certificates which I didn't understand but may be relevant: https://mailman-int.corp.redhat.com/archives/rhel-devel/2021-April/thread.html#00501


This happens for me on both RHEL 9 and Fedora 33.

It turns out (thanks Dan) that redhat-internal-cert-install was not installed. The error message should say this or the package should depend on this one.

centpkg is in Fedora, so it's not allowed to require a non-Fedora package.

I would expect that hatter are either using CSB (which has that preinstalled) or they manually install that package themselves. centpkg is far from the only thing that needs that cert to be trusted.

This is now tested and working, even on machines without redhat-internal-cert-install.
We are closing this issue.
If this is still failling for you, please re-open this issue

Metadata Update from @tdawson:
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata