View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000405 | AlmaLinux-9 | curl | public | 2023-06-23 15:57 | 2023-06-27 08:41 |
| Reporter | li9hstwebservices | Assigned To | |||
| Priority | high | Severity | major | Reproducibility | have not tried |
| Status | new | Resolution | open | ||
| Summary | 0000405: Curl error (60): SSL peer certificate or SSH remote key | ||||
| Description | AlmaLinux 9 - AppStream 0.0 B/s | 0 B 00:02 Errors during downloading metadata for repository ‘appstream’: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.almalinux.org/mirrorlist/9/appstream 2 [SSL: no alternative certificate subject name matches target host name ‘mirrors.almalinux.org’] Error: Failed to download metadata for repo ‘appstream’: Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.almalinux.org/mirrorlist/9/appstream 2 [SSL: no alternative certificate subject name matches target host name ‘mirrors.almalinux.org’] | ||||
| Tags | No tags attached. | ||||
|
|
Hi li9hstwebservices, In the output of this command: openssl s_client -connect mirrors.almalinux.org:443 Please, check if certificate chain is the same as below. --- Certificate chain 0 s:CN = *.almalinux.org i:C = US, O = Let's Encrypt, CN = E1 a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384 v:NotBefore: May 30 18:46:12 2023 GMT; NotAfter: Aug 28 18:46:11 2023 GMT 1 s:CN = *.almalinux.org i:C = US, O = Let's Encrypt, CN = E1 a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384 v:NotBefore: May 30 18:46:12 2023 GMT; NotAfter: Aug 28 18:46:11 2023 GMT 2 s:C = US, O = Let's Encrypt, CN = E1 i:C = US, O = Internet Security Research Group, CN = ISRG Root X2 a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384 v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT 3 s:C = US, O = Internet Security Research Group, CN = ISRG Root X2 i:C = US, O = Internet Security Research Group, CN = ISRG Root X1 a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256 v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT --- If not, please consult with your Network Security team about any firewall or similar configuration. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2023-06-23 15:57 | li9hstwebservices | New Issue | |
| 2023-06-27 08:41 |
|
Note Added: 0000920 |
