Project

General

Profile

Actions
Copy link

tickets #181223

closed

repositories/KDE:/KDE3/openSUSE_Tumbleweed SSL certificate problem: certificate has expired

Added by mchnz 21 days ago. Updated 20 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
firstyear
Category:
Mirrors
Target version:
-
Start date:
2025-04-21
Due date:
% Done:

0%

Estimated time:

Description

I was trying to do a zypper ref and it's failing for:

https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/

It appears the sites SSL certificate has expired:

Retrieving repository 'KDE 3.5.10 and Qt3-related software (openSUSE_Tumbleweed)' metadata .........................................[error]
Repository 'KDE 3.5.10 and Qt3-related software (openSUSE_Tumbleweed)' is invalid.
[KDE_KDE3|https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/] Failed to retrieve new repository metadata.
History:
 - Download (curl) error for 'https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/6f4b7d8a0a494a7cfb2890ba5959974bd71b5c39a5726e2adf7ce8d65ba9eec586a18c97ac3b000eb944d8d269565050e980f12c4ba7ea1a28ca95969cff7bc0-filelists-ext.xml.gz':
   Error code: The peer certificate could not be verified Curl error (60)
   Error message: SSL certificate problem: certificate has expired
Please check if the URIs defined for this repository are pointing to a valid repository.

Related issues 1 (0 open — 1 closed)

Related to openSUSE admin - tickets #181229: Tumbleweed is saying repository certificates have expired on the Australian mirrorResolvedfirstyear2025-04-22

Actions
Actions
Copy link
 #1

Updated by crameleon 21 days ago

  • Tracker changed from communication to tickets
  • Category set to Mirrors
  • Assignee set to opensuse-admin-obs
  • Private changed from Yes to No
Actions
Copy link
 #2

Updated by darix 21 days ago

I can not see the certificates being expired. Neither the files on disk nor the certs sent by the server are out dated.

could this be zypper reporting an error from a mirror as if it comes from download.opensuse.org?

Actions
Copy link
 #3

Updated by crameleon 21 days ago

Actions
Copy link
 #4

Updated by zbenjamin 21 days ago

Hard to tell without the zypper.log, if you set the env var ZYPP_MEDIA_CURL_DEBUG=2 the redirects should be logged.

Actions
Copy link
 #5

Updated by mchnz 21 days ago

Yes, it looks like it is an issue with a mirror, I just tried a wget. I have set download.use_geoip_mirror = false in /etc/zypp/zypp.conf, but that doesn't help, the mirror is still used.

wget 'https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz'
--2025-04-22 22:13:04--  https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz
Resolving download.opensuse.org (download.opensuse.org)... 195.135.223.226, 2a07:de40:b250:131:10:151:131:30
Connecting to download.opensuse.org (download.opensuse.org)|195.135.223.226|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://mirrorcache-au.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz [following]
--2025-04-22 22:13:05--  https://mirrorcache-au.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz
Resolving mirrorcache-au.opensuse.org (mirrorcache-au.opensuse.org)... 172.105.167.90, 2400:8907::f03c:92ff:fe82:7bb
Connecting to mirrorcache-au.opensuse.org (mirrorcache-au.opensuse.org)|172.105.167.90|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://mirror.firstyear.id.au/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz [following]
--2025-04-22 22:13:05--  https://mirror.firstyear.id.au/repositories/KDE:/KDE3/openSUSE_Tumbleweed/repodata/5a517fd50335e5e385348f67c0433d104e064ae03469036b6be66484ad29b4ba7131037f84d4d591b0cdd774b004503fae4eff2bd37ccc49a79dd05432904206-filelists-ext.xml.gz
Resolving mirror.firstyear.id.au (mirror.firstyear.id.au)... 194.195.251.131, 2400:8907::f03c:95ff:fe99:5abf
Connecting to mirror.firstyear.id.au (mirror.firstyear.id.au)|194.195.251.131|:443... connected.
ERROR: cannot verify mirror.firstyear.id.au's certificate, issued by ‘CN=E6,O=Let's Encrypt,C=US’:
  Issued certificate has expired.
To connect to mirror.firstyear.id.au insecurely, use `--no-check-certificate'.
Actions
Copy link
 #6

Updated by crameleon 21 days ago

  • Related to tickets #181229: Tumbleweed is saying repository certificates have expired on the Australian mirror added
Actions
Copy link
 #7

Updated by mchnz 21 days ago

I've managed to step around the issue by editing /etc/zypp/repos.d/KDE3.repo and adding ?COUNTRY=de to the baseurl:

baseurl=https://download.opensuse.org/repositories/KDE:/KDE3/openSUSE_Tumbleweed/?COUNTRY=de
Actions
Copy link
 #8

Updated by crameleon 21 days ago

  • Assignee changed from opensuse-admin-obs to firstyear
Actions
Copy link
 #9

Updated by crameleon 20 days ago

  • Status changed from New to Resolved
Actions
Copy link

Also available in: Atom PDF