[Errno 14] curl#60 - "The certificate issuer's certificate has expired.

Issues related to applications and software problems
Post Reply
Kathiravan
Posts: 1
Joined: 2022/12/05 11:51:44

[Errno 14] curl#60 - "The certificate issuer's certificate has expired.

Post by Kathiravan » 2022/12/05 13:02:25

Hi,

I want to install the new version of Postgres on CentOS 7. Facing the below error. Kindly assist.

https://download.postgresql.org/pub/rep ... repomd.xml: [Errno 14] curl#60 - "The certificate issuer's certificate has expired. Check your system date and time."
Trying other mirror.
It was impossible to connect to the CentOS servers.
This could mean a connectivity issue in your environment, such as the requirement to configure a proxy,
or a transparent proxy that tampers with TLS security, or an incorrect system clock.
Please collect information about the specific failure that occurs in your environment,
using the instructions in: https://access.redhat.com/solutions/1527033 and create a bug on https://bugs.centos.org/



One of the configured repositories failed (PostgreSQL 10 for RHEL / CentOS 7 - x86_64),
and yum doesn't have enough cached data to continue. At this point the only
safe thing yum can do is fail. There are a few ways to work "fix" this:

1. Contact the upstream for the repository and get them to fix the problem.

2. Reconfigure the baseurl/etc. for the repository, to point to a working
upstream. This is most often useful if you are using a newer
distribution release than is supported by the repository (and the
packages for the previous distribution release still work).

3. Run the command with the repository temporarily disabled
yum --disablerepo=pgdg10 ...

4. Disable the repository permanently, so yum won't use it by default. Yum
will then just ignore the repository until you permanently enable it
again or use --enablerepo for temporary usage:

yum-config-manager --disable pgdg10
or
subscription-manager repos --disable=pgdg10

5. Configure the failing repository to be skipped, if it is unavailable.
Note that yum will try to contact the repo. when it runs most commands,
so will have to try and fail each time (and thus. yum will be be much
slower). If it is a very temporary problem though, this is often a nice
compromise:

yum-config-manager --save --setopt=pgdg10.skip_if_unavailable=true

failure: repodata/repomd.xml from pgdg10: [Errno 256] No more mirrors to try.
https://download.postgresql.org/pub/rep ... repomd.xml: [Errno 14] curl#60 - "The certificate issuer's certificate has expired. Check your system date and time."


thank you so much!.

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: [Errno 14] curl#60 - "The certificate issuer's certificate has expired.

Post by TrevorH » 2022/12/05 13:53:22

Check your date/time. The certificate that I received by running openssl s_client -connect download.postgresql.org:443 -servername download.postgresql.org | openssl x509 -dates is valid until "notAfter=Jan 19 05:08:11 2023 GMT"
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Whoever
Posts: 1357
Joined: 2013/09/06 03:12:10

Re: [Errno 14] curl#60 - "The certificate issuer's certificate has expired.

Post by Whoever » 2022/12/06 03:01:21

Just an additional note on Trevor's post: download.postgresql.org could be any one of 4 servers. However, none of them has an expired certificate.

Code: Select all

$ dig download.postgresql.org

; <<>> DiG 9.16.33 <<>> download.postgresql.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63607
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 0c61ccccce98b87b01000000638eafd78d6743970d51c556 (good)
;; QUESTION SECTION:
;download.postgresql.org.	IN	A

;; ANSWER SECTION:
download.postgresql.org. 17869	IN	CNAME	ftp.mirrors.postgresql.org.
ftp.mirrors.postgresql.org. 770	IN	A	147.75.85.69
ftp.mirrors.postgresql.org. 770	IN	A	72.32.157.246
ftp.mirrors.postgresql.org. 770	IN	A	87.238.57.227
ftp.mirrors.postgresql.org. 770	IN	A	217.196.149.55

;; Query time: 0 msec
;; SERVER: 192.168.89.1#53(192.168.89.1)
;; WHEN: Mon Dec 05 18:58:31 PST 2022
;; MSG SIZE  rcvd: 184

Post Reply