Bug 30024

Summary:	running dnf --refresh upgrade leads to error for all repos
Product:	Mageia	Reporter:	peter lawford <petlaw726>
Component:	New RPM package request	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED DUPLICATE	QA Contact:
Severity:	major
Priority:	Normal	CC:	fri
Version:	8
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Source RPM:		CVE:
Status comment:

Description peter lawford 2022-02-10 12:59:51 CET

Description of problem:
when running the command:
# dnf --refresh upgrade
I obtained curl error for all repos

[root@mga6-64 alain4]# LC_ALL=C dnf --refresh upgrade   
created by dnf config-manager from http://dl.google.com/linux/chrome/rpm/stable/x86_64                              258  B/s | 1.3 kB     00:05    
google-earth-pro                                                                                                     25 kB/s | 1.3 kB     00:00    
Mageia 8 - i586                                                                                                     0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-i586':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=core&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-i586': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=core&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - i586 - Updates                                                                                           0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-i586':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=core&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-i586': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=core&repo=updates [SSL certificate problem: certificate has expired]
Mageia 8 - i586 - Nonfree                                                                                           0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-i586-nonfree':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=nonfree&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-i586-nonfree': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=nonfree&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - i586 - Nonfree - Updates                                                                                 0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-i586-nonfree':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=nonfree&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-i586-nonfree': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=nonfree&repo=updates [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64 - Nonfree                                                                                         0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-x86_64-nonfree':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=nonfree&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-x86_64-nonfree': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=nonfree&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64 - Nonfree - Updates                                                                               0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-x86_64-nonfree':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=nonfree&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-x86_64-nonfree': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=nonfree&repo=updates [SSL certificate problem: certificate has expired]
Mageia 8 - i586 - Tainted                                                                                           0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-i586-tainted':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=tainted&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-i586-tainted': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=tainted&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - i586 - Tainted - Updates                                                                                 0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-i586-tainted':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=tainted&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-i586-tainted': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=i586&section=tainted&repo=updates [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64 - Tainted                                                                                         0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-x86_64-tainted':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=tainted&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-x86_64-tainted': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=tainted&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64 - Tainted - Updates                                                                               0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-x86_64-tainted':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=tainted&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-x86_64-tainted': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=tainted&repo=updates [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64                                                                                                   0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'mageia-x86_64':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=core&repo=release [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'mageia-x86_64': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=core&repo=release [SSL certificate problem: certificate has expired]
Mageia 8 - x86_64 - Updates                                                                                         0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'updates-x86_64':
  - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=core&repo=updates [SSL certificate problem: certificate has expired]
Error: Failed to download metadata for repo 'updates-x86_64': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://www.mageia.org/mirrorlist/?release=8&arch=x86_64&section=core&repo=updates [SSL certificate problem: certificate has expired]
Opera packages                                                                                                       39 kB/s | 3.0 kB     00:00    
skype (stable)                                                                                                       25 kB/s | 2.9 kB     00:00    
vivaldi                                                                                                              87 kB/s | 2.9 kB     00:00    
Dépôts ignorés : mageia-i586, updates-i586, mageia-i586-nonfree, updates-i586-nonfree, mageia-x86_64-nonfree, updates-x86_64-nonfree, mageia-i586-tainted, updates-i586-tainted, mageia-x86_64-tainted, updates-x86_64-tainted, mageia-x86_64, updates-x86_64
Dépendances résolues.
Rien à faire.
Terminé !
[root@mga6-64 alain4]# 

nevertheless I could succesfully update my system with urpmi auto-update
[root@mga6-64 alain4]# urpmi --auto-update
le média « Core Release » est à jour
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/media_info/20220209-202642-synthesis.hdlist.cz
média « Core Updates » mis à jour                                                                                                                  
le média « Nonfree Release » est à jour
le média « Nonfree Updates » est à jour
le média « Tainted Release » est à jour
le média « Tainted Updates » est à jour
le média « Core 32bit Release » est à jour
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/i586/media/core/updates/media_info/20220209-201720-synthesis.hdlist.cz
média « Core 32bit Updates » mis à jour                                                                                                            
le média « Nonfree 32bit Release » est à jour
le média « Nonfree 32bit Updates » est à jour
le média « Tainted 32bit Release » est à jour
le média « Tainted 32bit Updates » est à jour
Pour satisfaire les dépendances, les paquetages suivants vont être installés :
  Paquetage                      Version      Révision      Arch    
(média « Core Updates »)
  glibc                          2.32         25.mga8       x86_64  
  glibc-devel                    2.32         25.mga8       x86_64  
un espace additionnel de 191Ko sera utilisé.
7.8Mo de paquets seront récupérés.
Procéder à l'installation des 2 paquetages ? (O/n) o


    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/glibc-devel-2.32-25.mga8.x86_64.rpm
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/glibc-2.32-25.mga8.x86_64.rpm                        
installation de glibc-devel-2.32-25.mga8.x86_64.rpm glibc-2.32-25.mga8.x86_64.rpm depuis /var/cache/urpmi/rpms                                     
Préparation...                   #################################################################################################################
      1/2: glibc                 #################################################################################################################
Reloading postfix configuration (via systemctl):           [  OK  ]
      2/2: glibc-devel           #################################################################################################################
      1/2: désinstallation de glibc-devel-6:2.32-23.mga8.x86_64
                                 #################################################################################################################
      2/2: désinstallation de glibc-6:2.32-23.mga8.x86_64
                                 #################################################################################################################
Vous devriez relancer votre ordinateur pour glibc
redémarrage de urpmi
Pour satisfaire les dépendances, les paquetages suivants vont être installés :
  Paquetage                      Version      Révision      Arch    
(média « Core Updates »)
  darktable                      3.8.0        1.1.mga8      x86_64  
  epiphany                       3.38.2       1.1.mga8      x86_64  
  lib64kdc-samba4_2              4.14.12      1.mga8        x86_64  
  lib64samba-dc0                 4.14.12      1.mga8        x86_64  
  lib64samba1                    4.14.12      1.mga8        x86_64  
  lib64smbclient0                4.14.12      1.mga8        x86_64  
  lib64wbclient0                 4.14.12      1.mga8        x86_64  
  samba-client                   4.14.12      1.mga8        x86_64  
  samba-common                   4.14.12      1.mga8        x86_64  
  samba-winbind                  4.14.12      1.mga8        x86_64  
  samba-winbind-clients          4.14.12      1.mga8        x86_64  
  samba-winbind-modules          4.14.12      1.mga8        x86_64  
un espace additionnel de 518Ko sera utilisé.
18Mo de paquets seront récupérés.
Procéder à l'installation des 12 paquetages ? (O/n) o


    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/samba-common-4.14.12-1.mga8.x86_64.rpm
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/lib64wbclient0-4.14.12-1.mga8.x86_64.rpm             
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/samba-client-4.14.12-1.mga8.x86_64.rpm               
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/samba-winbind-modules-4.14.12-1.mga8.x86_64.rpm      
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/samba-winbind-clients-4.14.12-1.mga8.x86_64.rpm      
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/lib64samba1-4.14.12-1.mga8.x86_64.rpm                
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/lib64smbclient0-4.14.12-1.mga8.x86_64.rpm            
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/epiphany-3.38.2-1.1.mga8.x86_64.rpm                  
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/lib64samba-dc0-4.14.12-1.mga8.x86_64.rpm             
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/lib64kdc-samba4_2-4.14.12-1.mga8.x86_64.rpm          
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/darktable-3.8.0-1.1.mga8.x86_64.rpm                  
    ftp://distrib-coffee.ipsl.jussieu.fr/pub/linux/Mageia/distrib/8/x86_64/media/core/updates/samba-winbind-4.14.12-1.mga8.x86_64.rpm              
installation de darktable-3.8.0-1.1.mga8.x86_64.rpm samba-winbind-4.14.12-1.mga8.x86_64.rpm epiphany-3.38.2-1.1.mga8.x86_64.rpm lib64smbclient0-4.14.12-1.mga8.x86_64.rpm samba-winbind-clients-4.14.12-1.mga8.x86_64.rpm samba-winbind-modules-4.14.12-1.mga8.x86_64.rpm lib64samba1-4.14.12-1.mga8.x86_64.rpm lib64kdc-samba4_2-4.14.12-1.mga8.x86_64.rpm lib64samba-dc0-4.14.12-1.mga8.x86_64.rpm samba-common-4.14.12-1.mga8.x86_64.rpm lib64wbclient0-4.14.12-1.mga8.x86_64.rpm samba-client-4.14.12-1.mga8.x86_64.rpm depuis /var/cache/urpmi/rpms
Préparation...                   #################################################################################################################
     1/12: lib64kdc-samba4_2     #################################################################################################################
     2/12: lib64samba-dc0        #################################################################################################################
     3/12: samba-common          #################################################################################################################
     4/12: lib64wbclient0        #################################################################################################################
     5/12: lib64samba1           #################################################################################################################
     6/12: lib64smbclient0       #################################################################################################################
     7/12: samba-winbind-modules #################################################################################################################
     8/12: samba-winbind         #################################################################################################################
     9/12: samba-winbind-clients #################################################################################################################
    10/12: samba-client          #################################################################################################################
    11/12: epiphany              #################################################################################################################
    12/12: darktable             #################################################################################################################
     1/12: désinstallation de samba-client-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     2/12: désinstallation de samba-winbind-clients-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     3/12: désinstallation de samba-winbind-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     4/12: désinstallation de lib64smbclient0-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     5/12: désinstallation de samba-winbind-modules-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     6/12: désinstallation de lib64kdc-samba4_2-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     7/12: désinstallation de samba-common-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     8/12: désinstallation de lib64samba-dc0-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
     9/12: désinstallation de lib64samba1-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
    10/12: désinstallation de lib64wbclient0-4.14.11-1.mga8.x86_64
                                 #################################################################################################################
    11/12: désinstallation de epiphany-3.38.2-1.mga8.x86_64
                                 #################################################################################################################
    12/12: désinstallation de darktable-3.8.0-1.mga8.x86_64
                                 #################################################################################################################
Vous avez du nouveau courrier dans /var/spool/mail/alain4
[root@mga6-64 alain4]#


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Comment 1 Morgan Leijström 2022-02-10 15:13:56 CET

Certificate expired :(

*** This bug has been marked as a duplicate of bug 30022 ***

CC: (none) => fri
Resolution: (none) => DUPLICATE
Status: NEW => RESOLVED

Comment 2 peter lawford 2022-02-10 15:39:32 CET

(In reply to Morgan Leijström from comment #1)
> Certificate expired :(
> 
> *** This bug has been marked as a duplicate of bug 30022 ***

it doesn't solve the problem; when certificate will be valid again? is this the end of mageia?

Comment 3 Morgan Leijström 2022-02-10 16:08:59 CET

It was simply forgotten to renew.
New cert is ordered but may take some time.

I guess there is a way to make dnf not care about cert

I dont know why at least for me urpmi & drakrpm do not complain yet.

Comment 4 Morgan Leijström 2022-02-10 16:09:58 CET

Ah of course, workaround is to avoid mirrorlist, and define a specific mirror instead :)

Comment 5 peter lawford 2022-02-10 17:14:21 CET

(In reply to Morgan Leijström from comment #4)
> Ah of course, workaround is to avoid mirrorlist, and define a specific
> mirror instead :)

and what command is used to define a specific mirror?

Comment 6 Morgan Leijström 2022-02-10 17:32:50 CET

For my 64 bit system in Sweden, I do as root
 urpmi.removemedia -a
 urpmi.addmedia --distrib https://ftp.acc.umu.se/mirror/mageia/distrib/8/x86_64/

Comment 7 Morgan Leijström 2022-02-10 17:51:50 CET

For dnf, see
https://wiki.mageia.org/en/Using_DNF#Install_and_Setup