[Errno 14] problem making ssl connection

General support questions
Post Reply
do_0699
Posts: 3
Joined: 2021/12/29 09:05:48

[Errno 14] problem making ssl connection

Post by do_0699 » 2021/12/29 09:14:51

Hello,
I would like to place the following order line "yum install -y rsync" but I have an error message
"Modules complémentaires chargés : fastestmirror
Configuration du processus d'installation
Loading mirror speeds from cached hostfile
https://vault.centos.org/6.6/os/x86_64/ ... repomd.xml: [Errno 14] problem making ssl connection
Essai d'un autre miroir.
Erreur : Cannot retrieve repository metadata (repomd.xml) for repository: base. Please verify its path and try again"

I modified my CentOS-Base.repo file

# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

but it doesn't work.

I am creating a new CentOS7 server and I need to do this update to transfer the data from the steel to the new.

Thanks in advance

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: [Errno 14] problem making ssl connection

Post by TrevorH » 2021/12/29 13:57:14

vault.centos.org only supports TLS 1.2 and higher and CentOS 6.6 does not support TLS 1.2. You will either need to update your openssl* packages (and probably a lot of other stuff too) to allow your systejm to talk TLS 1.2 or you need to download the package you are interested in (from a different system that does support TLS 1.2) and copy it over and install it locally.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

do_0699
Posts: 3
Joined: 2021/12/29 09:05:48

Re: [Errno 14] problem making ssl connection

Post by do_0699 » 2021/12/29 14:12:31

that must contain my file CentOS-Base.repo ? because I want to install "wget" but even error message

Tahnk's

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: [Errno 14] problem making ssl connection

Post by TrevorH » 2021/12/29 17:35:20

Yes, you will need to manually download and transfer packages to the system until you can upgrade it to understand new supported TLS versions.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

do_0699
Posts: 3
Joined: 2021/12/29 09:05:48

Re: [Errno 14] problem making ssl connection

Post by do_0699 » 2021/12/30 07:06:52

Hello,
I updated openssl (1.0.2l) without success.
I always get an error message

# yum install -y rsync
Modules complémentaires chargés : fastestmirror
Configuration du processus d'installation
Loading mirror speeds from cached hostfile
http://vault.centos.org/6/os/x86_64/repodata/repomd.xml: [Errno 14] problem making ssl connection
Essai d'un autre miroir.
Erreur : Cannot retrieve repository metadata (repomd.xml) for repository: base. Please verify its path and try again

ms217
Posts: 7
Joined: 2020/09/14 10:40:31

Re: [Errno 14] problem making ssl connection

Post by ms217 » 2021/12/30 21:05:54

Firstly: It's a very bad idea to overwrite the default OpenSSL version of a binary linux distribution.
There is a crapload of very important base system packages where OpenSSL is/was used at built time.

You better revert this step or you'll have to rebuild many many base packages yourself...

Secondly: The URL that you use doesn't exist anymore.
Have a look at vault.centos.org where the repodata is located for CentOS 6.10.

Thirdly:
Your Yum / Python is not up-to-date (in terms of CentOS 6 up-to-date, not to be mixed up by the newest Python or Yum version) as well which will most likely be the reason why you still have problems with initiating the SSL connection, but this problem seems to be also linked to your first problem that you upgraded the base/native OpenSSL version of CentOS 6 which was a big mistake.

Last but not least:
CentOS 6 is end of life. You better migrate your server system to something else like AlmaLinux, Rocky Linux, RHEL or alternatively buy the Extended Long Termin Service from Redhat or Cloudlinux/Tuxcare for CentOS 6.

chemal
Posts: 776
Joined: 2013/12/08 19:44:49

Re: [Errno 14] problem making ssl connection

Post by chemal » 2021/12/30 22:30:34

On top of that: rpm uses (lib)curl, which uses nss (not openssl).

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: [Errno 14] problem making ssl connection

Post by TrevorH » 2021/12/30 23:42:00

There was never an openssl 1.0.2 for CentOS 6 which means you did a source install and probably broke lots of stuff. What you should have done is download the latest openssl* 1.0.1e packages from vault and install them. Or since you jsut want to get rsync running so that you can migrate to $newer, update just that and not bother with the rest of the system.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

fometeo
Posts: 1
Joined: 2022/03/04 08:50:36

Re: [Errno 14] problem making ssl connection

Post by fometeo » 2022/03/04 08:56:38

CERN made a convenient choice of keeping CentOS 6 vault access compatible with older TLS connections
https://www.mark-gilbert.co.uk/fixing-y ... w-its-eol/

so for a legacy CentOS 6.4 the /etc/yum.repos.d/CentOS-Base.repo

[C6.4-base]
name=CentOS-6.4 - Base
baseurl=http://linuxsoft.cern.ch/centos-vault/6.4/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-updates]
name=CentOS-6.4 - Updates
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-extras]
name=CentOS-6.4 - Extras
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-contrib]
name=CentOS-6.4 - Contrib
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never

[C6.4-centosplus]
name=CentOS-6.4 - CentOSPlus
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never

Post Reply