View Issue Details

IDProjectCategoryView StatusLast Update
0003235Rocky ServicesMirror Managerpublic2023-05-16 22:40
ReporterThomas Oo Assigned ToNeil Hanlon  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Summary0003235: certificate signature failure at mirrors.rockylinux.org:443
DescriptionOn rocky linux 8.7 generic cloud, I cannot do dnf install as ssl keeps failing
OS link: https://dl.rockylinux.org/pub/rocky/9/images/x86_64/Rocky-9-GenericCloud-Base.latest.x86_64.qcow2

I ran `openssl s_client -showcerts -connect mirrors.rockylinux.org:443` to check and it fails with
Verify return code: 7 (certificate signature failure)
Steps To Reproduceopenssl s_client -showcerts -connect mirrors.rockylinux.org:443
TagsNo tags attached.

Activities

Thomas Oo

Thomas Oo

2023-05-15 22:36

reporter   ~0003301

Typo in description for OS link, it is actually from https://dl.rockylinux.org/pub/rocky/8/images/x86_64/Rocky-8-GenericCloud-Base.latest.x86_64.qcow2
Neil Hanlon

Neil Hanlon

2023-05-16 20:27

administrator   ~0003368

Can you confirm that the time on your server was set to the current date (e.g., that ntp was running and able to reconfigure the clock)?
Thomas Oo

Thomas Oo

2023-05-16 21:56

reporter   ~0003369

Yes, I've confirmed that `date` is the same as the current date. By the way I am running this as a VM using KVM, I run into the issue when running the commands using `virt-customize` but there is no issue when I boot the vm and run the commands..
Thomas Oo

Thomas Oo

2023-05-16 22:37

reporter   ~0003370

Ok I finally found it's an issue on my end with kvm, I got a log saying "warning libguestfs: warning: current user is not a member of the KVM group" ... "It is recommended that you 'chmod 0666 /dev/kvm' or add the current user to the KVM group"

After doing so it worked fine. So not a bug with Rocky linux, my apologies
Neil Hanlon

Neil Hanlon

2023-05-16 22:40

administrator   ~0003371

I'm glad you were able to figure it out! That bit is often a pain point, but I don't think I have seen it manifest in this manner before.

In any case, no worries about opening the bug, that's what we're here for!

Best,
Neil

Issue History

Date Modified Username Field Change
2023-05-15 22:34 Thomas Oo New Issue
2023-05-15 22:36 Thomas Oo Note Added: 0003301
2023-05-16 20:27 Neil Hanlon Assigned To => Neil Hanlon
2023-05-16 20:27 Neil Hanlon Status new => needinfo
2023-05-16 20:27 Neil Hanlon Note Added: 0003368
2023-05-16 21:56 Thomas Oo Note Added: 0003369
2023-05-16 22:37 Thomas Oo Note Added: 0003370
2023-05-16 22:40 Neil Hanlon Status needinfo => closed
2023-05-16 22:40 Neil Hanlon Resolution open => fixed
2023-05-16 22:40 Neil Hanlon Note Added: 0003371