View Issue Details

IDProjectCategoryView StatusLast Update
0000195AlmaLinux-8crypto-policiespublic2022-03-04 21:51
ReporterhirschQ Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status newResolutionopen 
Platformvmware virtual machineOSAlmalinuxOS Version8.5
Summary0000195: crypto mismatch: baseos mirrolist SSL certificate problem: EE certificate key too weak
DescriptionIt is not possible to use the almalinux baseos mirrorlist when crypto policy set = FUTURE

Errors during downloading metadata for repository 'baseos':
  - Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://mirrors.almalinux.org/mirrorlist/8/baseos [SSL certificate problem: EE certificate key too weak]
Error: Failed to download metadata for repo 'baseos': Cannot prepare internal mirrorlist: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://mirrors.almalinux.org/mirrorlist/8/baseos [SSL certificate problem: EE certificate key too weak]
Steps To ReproduceI installed minimal Almalinux with Security Profile: CIS Benchmark Level 2 for Server and tried to update or install.
But changing crypto-policy to future will reproduce the error, too:

update-crypto-policies --set FUTURE
reboot
dnf install nano
Tagsinstallation, selinux
abrt_hash
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2022-03-04 21:51 hirschQ New Issue
2022-03-04 21:51 hirschQ Tag Attached: installation
2022-03-04 21:51 hirschQ Tag Attached: selinux