Page 1 of 1

[Errno 14] problem making ssl connection

Posted: 2021/12/29 09:14:51
by do_0699
Hello,
I would like to place the following order line "yum install -y rsync" but I have an error message
"Modules complémentaires chargés : fastestmirror
Configuration du processus d'installation
Loading mirror speeds from cached hostfile
https://vault.centos.org/6.6/os/x86_64/ ... repomd.xml: [Errno 14] problem making ssl connection
Essai d'un autre miroir.
Erreur : Cannot retrieve repository metadata (repomd.xml) for repository: base. Please verify its path and try again"

I modified my CentOS-Base.repo file

# CentOS-Base.repo
#
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$ ... fra=$infra
#baseurl=http://mirror.centos.org/centos/$releas ... $basearch/
baseurl=https://vault.centos.org/6.6/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6

but it doesn't work.

I am creating a new CentOS7 server and I need to do this update to transfer the data from the steel to the new.

Thanks in advance

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/29 13:57:14
by TrevorH
vault.centos.org only supports TLS 1.2 and higher and CentOS 6.6 does not support TLS 1.2. You will either need to update your openssl* packages (and probably a lot of other stuff too) to allow your systejm to talk TLS 1.2 or you need to download the package you are interested in (from a different system that does support TLS 1.2) and copy it over and install it locally.

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/29 14:12:31
by do_0699
that must contain my file CentOS-Base.repo ? because I want to install "wget" but even error message

Tahnk's

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/29 17:35:20
by TrevorH
Yes, you will need to manually download and transfer packages to the system until you can upgrade it to understand new supported TLS versions.

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/30 07:06:52
by do_0699
Hello,
I updated openssl (1.0.2l) without success.
I always get an error message

# yum install -y rsync
Modules complémentaires chargés : fastestmirror
Configuration du processus d'installation
Loading mirror speeds from cached hostfile
http://vault.centos.org/6/os/x86_64/repodata/repomd.xml: [Errno 14] problem making ssl connection
Essai d'un autre miroir.
Erreur : Cannot retrieve repository metadata (repomd.xml) for repository: base. Please verify its path and try again

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/30 21:05:54
by ms217
Firstly: It's a very bad idea to overwrite the default OpenSSL version of a binary linux distribution.
There is a crapload of very important base system packages where OpenSSL is/was used at built time.

You better revert this step or you'll have to rebuild many many base packages yourself...

Secondly: The URL that you use doesn't exist anymore.
Have a look at vault.centos.org where the repodata is located for CentOS 6.10.

Thirdly:
Your Yum / Python is not up-to-date (in terms of CentOS 6 up-to-date, not to be mixed up by the newest Python or Yum version) as well which will most likely be the reason why you still have problems with initiating the SSL connection, but this problem seems to be also linked to your first problem that you upgraded the base/native OpenSSL version of CentOS 6 which was a big mistake.

Last but not least:
CentOS 6 is end of life. You better migrate your server system to something else like AlmaLinux, Rocky Linux, RHEL or alternatively buy the Extended Long Termin Service from Redhat or Cloudlinux/Tuxcare for CentOS 6.

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/30 22:30:34
by chemal
On top of that: rpm uses (lib)curl, which uses nss (not openssl).

Re: [Errno 14] problem making ssl connection

Posted: 2021/12/30 23:42:00
by TrevorH
There was never an openssl 1.0.2 for CentOS 6 which means you did a source install and probably broke lots of stuff. What you should have done is download the latest openssl* 1.0.1e packages from vault and install them. Or since you jsut want to get rsync running so that you can migrate to $newer, update just that and not bother with the rest of the system.

Re: [Errno 14] problem making ssl connection

Posted: 2022/03/04 08:56:38
by fometeo
CERN made a convenient choice of keeping CentOS 6 vault access compatible with older TLS connections
https://www.mark-gilbert.co.uk/fixing-y ... w-its-eol/

so for a legacy CentOS 6.4 the /etc/yum.repos.d/CentOS-Base.repo

[C6.4-base]
name=CentOS-6.4 - Base
baseurl=http://linuxsoft.cern.ch/centos-vault/6.4/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-updates]
name=CentOS-6.4 - Updates
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-extras]
name=CentOS-6.4 - Extras
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.4-contrib]
name=CentOS-6.4 - Contrib
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never

[C6.4-centosplus]
name=CentOS-6.4 - CentOSPlus
baseurl=http://linuxsoft.cern.ch/centos-vault/6 ... $basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never