View Issue Details

IDProjectCategoryView StatusLast Update
0000405AlmaLinux-9curlpublic2023-06-27 08:41
Reporterli9hstwebservices Assigned To 
PriorityhighSeveritymajorReproducibilityhave not tried
Status newResolutionopen 
Summary0000405: Curl error (60): SSL peer certificate or SSH remote key
DescriptionAlmaLinux 9 - AppStream 0.0 B/s | 0 B 00:02
Errors during downloading metadata for repository ‘appstream’:

Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.almalinux.org/mirrorlist/9/appstream 2 [SSL: no alternative certificate subject name matches target host name ‘mirrors.almalinux.org’]
Error: Failed to download metadata for repo ‘appstream’: Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.almalinux.org/mirrorlist/9/appstream 2 [SSL: no alternative certificate subject name matches target host name ‘mirrors.almalinux.org’]
TagsNo tags attached.

Activities

user624

2023-06-27 08:41

  ~0000920

Hi li9hstwebservices,

In the output of this command:
openssl s_client -connect mirrors.almalinux.org:443


Please, check if certificate chain is the same as below.

---
Certificate chain
 0 s:CN = *.almalinux.org
   i:C = US, O = Let's Encrypt, CN = E1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: May 30 18:46:12 2023 GMT; NotAfter: Aug 28 18:46:11 2023 GMT
 1 s:CN = *.almalinux.org
   i:C = US, O = Let's Encrypt, CN = E1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: May 30 18:46:12 2023 GMT; NotAfter: Aug 28 18:46:11 2023 GMT
 2 s:C = US, O = Let's Encrypt, CN = E1
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X2
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
 3 s:C = US, O = Internet Security Research Group, CN = ISRG Root X2
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep 4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
---

If not, please consult with your Network Security team about any firewall or similar configuration.

Issue History

Date Modified Username Field Change
2023-06-23 15:57 li9hstwebservices New Issue
2023-06-27 08:41 user624 Note Added: 0000920