[rhelv6-list] Fun with new RHEL

Bill Nottingham notting at redhat.com
Thu Nov 11 21:57:05 UTC 2010


Chris Adams (cmadams at hiwaay.net) said: 
> Another odd thing: I have for years used a local Squid proxy for updates
> (speeds up updating a bunch of similar systems and allows me to manage
> the bandwidth consumed in one place).  To cache the RPMs, I've set
> "useNoSSLForPackages=1" in /etc/sysconfig/rhn/up2date.  Now when I do
> that, I get:
> 
> # yum update
> Loaded plugins: rhnplugin
> rhel-x86_64-server-6                                     | 1.8 kB     00:00     
> Error: failed to retrieve repodata/6faecb305efb123bd886342dd108b407fc2b14ace71b46e66a675209e97da51a-primary.xml.gz from rhel-x86_64-server-6
> error was [Errno 14] Peer cert cannot be verified or peer cert invalid

Please file an issue for this. Although it looks like it's something where
it's attempting to validate the peer HTTPS cert, but ends up using the
proxy's IP, so the hostname doesn't match, and it fails. That might be hard
to fix as long as the proxy is there.

Bill




More information about the rhelv6-list mailing list