Menginstal Nginx di Scientific Linux menurut dokumentasi ini gagal:
[[email protected] ~]$ sudo su -c 'rpm -Uvh http://dl.fedoraproject.org/pub/epe
l/6/x86_64/epel-release-6-8.noarch.rpm'
Retrieving http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch
.rpm
warning: /var/tmp/rpm-tmp.gdSOR9: Header V3 RSA/SHA256 Signature, key ID 0608b89
5: NOKEY
Preparing... ########################################### [100%]
1:epel-release ########################################### [100%]
[[email protected] ~]$ sudo yum install nginx
Loaded plugins: security
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Pl
ease verify its path and try again
[[email protected] ~]$
Informasi versi
[[email protected] ~]$ uname -a
Linux localhost.localdomain 2.6.32-431.el6.x86_64 #1 SMP Thu Nov 21 13:35:52 CST
2013 x86_64 x86_64 x86_64 GNU/Linux
[[email protected] ~]$ cat /etc/*{release,version}
Scientific Linux release 6.5 (Carbon)
Scientific Linux release 6.5 (Carbon)
cat: /etc/*version: No such file or directory
[[email protected] ~]$
Catatan: sudo yum update -y dikeluarkan sebelum memulai instalasi nginx
Penginstalan paket lain dinonaktifkan
[[email protected] ~]$ sudo yum install vim -y
Loaded plugins: security
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Pl
ease verify its path and try again
[[email protected] ~]$
Log Debugger URLGRABBER
2014-08-03 14:22:44,437 attempt 1/10: https://mirrors.fedoraproject.org/metalink
?repo=epel-6&arch=x86_64
INFO:urlgrabber:attempt 1/10: https://mirrors.fedoraproject.org/metalink?repo=ep
el-6&arch=x86_64
2014-08-03 14:22:44,438 opening local file "/var/cache/yum/x86_64/6.5/epel/metal
ink.xml.tmp" with mode wb
INFO:urlgrabber:opening local file "/var/cache/yum/x86_64/6.5/epel/metalink.xml.
tmp" with mode wb
* About to connect() to mirrors.fedoraproject.org port 443 (#0)
* Trying IP... * connected
* Connected to mirrors.fedoraproject.org (IP) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* NSS error -8018
* Closing connection #0
* Problem with the SSL CA cert (path? access rights?)
2014-08-03 14:22:50,071 exception: [Errno 14] PYCURL ERROR 77 - "Problem with th
e SSL CA cert (path? access rights?)"
INFO:urlgrabber:exception: [Errno 14] PYCURL ERROR 77 - "Problem with the SSL CA
cert (path? access rights?)"
2014-08-03 14:22:50,072 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raisi
ng
INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Pl
ease verify its path and try again
Hasilkan pembaruan yum sebelum dan sesudah mencoba memasang nginx
[[email protected] ~]$ sudo yum update -y
Loaded plugins: security
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Pl
ease verify its path and try again
[[email protected] ~]$
yum –disablerepo=”epel” pembaruan
[[email protected] ~]$ sudo yum --disablerepo="epel" update
Loaded plugins: security
Setting up Update Process
No Packages marked for Update
Jawaban yang Diterima:
Jika berikut ini gagal:
yum check-update
tapi:
yum --disablerepo="epel" check-update
berfungsi, lalu jalankan:
URLGRABBER_DEBUG=1 yum check-update 2> debug.log
dan centang debug.log untuk:
PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
Jika pesan ini ditemukan, coba:
yum --disablerepo="epel" reinstall ca-certificates
Jika itu gagal untuk menyelesaikan masalah, maka Anda mungkin perlu memperbarui ca-sertifikat Anda:
yum --disablerepo="epel" update ca-certificates
Jika gagal menyelesaikan masalah, buat cadangan sertifikat CA Anda saat ini:
cp /etc/pki/tls/certs/ca-bundle.crt /root/
dan jalankan:
curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt
Penjelasan
Terkait:Linux – Mendapatkan OS open-source yang benar-benar hanya berjalan di telepon? Android?Log menunjukkan kesalahan dengan sertifikat SSL sistem Anda.
Bundel sertifikat CA di sistem Anda mungkin entah bagaimana menjadi rusak dan yum -disablerepo="epel" reinstall ca-certificates perintah di atas hanya menimpa milik Anda dengan versi baru. Ini tidak mungkin menjadi jawaban karena semua repo lainnya berfungsi – jika ada masalah SSL utama, maka semua repo akan gagal.
curl... perintah di atas menggantikan bundel sertifikat CA sistem Anda dengan versi yang lebih baru. Paket sertifikat CA berisi semua sertifikat CA root yang dipercaya oleh sistem Anda.
Dalam hal ini, repo EPEL memiliki sertifikat SSL baru (ditandatangani oleh CA root baru) yang tidak dipercaya oleh sistem Anda. Repo CentOS terus bekerja dengan sertifikat yang sedikit lebih tua.