Kevin Fenzi wrote: > Try doing: > > URLGRABBER_DEBUG=1 yum update This is what I get (edited to exclude rpmfusion): 2011-11-11 19:03:36,668 attempt 1/10: https://mirrors.fedoraproject.org/metalink?repo=updates-released- f16&arch=x86_64 INFO:urlgrabber:attempt 1/10: https://mirrors.fedoraproject.org/metalink?repo=updates-released- f16&arch=x86_64 2011-11-11 19:03:36,668 opening local file "/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb INFO:urlgrabber:opening local file "/var/cache/yum/x86_64/16/updates/metalink.xml.tmp" with mode wb * About to connect() to mirrors.fedoraproject.org port 443 (#0) * Trying 140.211.169.197... * connected * Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0) * warning: ignoring unsupported value (1) of ssl.verifyhost * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US' * NSS error -8172 * Closing connection #0 * Peer certificate cannot be authenticated with given CA certificates 2011-11-11 19:03:36,920 exception: [Errno 14] Peer cert cannot be verified or peer cert invalid INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert invalid 2011-11-11 19:03:36,920 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re- raising INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising adobe-linux-x86_64 2/2 2011-11-11 19:03:37,336 combined options: { 'text' : 'fedora/metalink', 'delegate' : { 'bandwidth' : 0, 'cache_openers': True, 'checkfunc' : None, 'close_connection': 0, 'copy_local' : 0, 'data' : None, 'delegate' : None, 'failure_callback': None, 'ftp_headers' : None, 'http_headers' : (), 'interrupt_callback': None, 'ip_resolve' : None, 'keepalive' : True, 'max_header_size': 2097152, 'opener' : None, 'password' : None, 'prefix' : None, 'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>, 'proxies' : None, 'quote' : None, 'range' : None, 'reget' : None, 'retry' : 10, 'retrycodes' : [-1, 2, 4, 5, 6, 7], 'size' : None, 'ssl_ca_cert' : None, 'ssl_cert' : None, 'ssl_cert_type': 'PEM', 'ssl_context' : None, 'ssl_key' : None, 'ssl_key_pass' : None, 'ssl_key_type' : 'PEM', 'ssl_verify_host': True, 'ssl_verify_peer': True, 'text' : None, 'throttle' : 0, 'timeout' : 30.0, 'urlparser' : <urlgrabber.grabber.URLParser instance at 0x2b149e0>, 'user_agent' : 'urlgrabber/3.9.1 yum/3.4.3', 'username' : None, } } DEBUG:urlgrabber:combined options: { 'text' : 'fedora/metalink', 'delegate' : { 'bandwidth' : 0, 'cache_openers': True, 'checkfunc' : None, 'close_connection': 0, 'copy_local' : 0, 'data' : None, 'delegate' : None, 'failure_callback': None, 'ftp_headers' : None, 'http_headers' : (), 'interrupt_callback': None, 'ip_resolve' : None, 'keepalive' : True, 'max_header_size': 2097152, 'opener' : None, 'password' : None, 'prefix' : None, 'progress_obj' : <output.YumTextMeter instance at 0x2a78d88>, 'proxies' : None, 'quote' : None, 'range' : None, 'reget' : None, 'retry' : 10, 'retrycodes' : [-1, 2, 4, 5, 6, 7], 'size' : None, 'ssl_ca_cert' : None, 'ssl_cert' : None, 'ssl_cert_type': 'PEM', 'ssl_context' : None, 'ssl_key' : None, 'ssl_key_pass' : None, 'ssl_key_type' : 'PEM', 'ssl_verify_host': True, 'ssl_verify_peer': True, 'text' : None, 'throttle' : 0, 'timeout' : 30.0, 'urlparser' : <urlgrabber.grabber.URLParser instance at 0x2b149e0>, 'user_agent' : 'urlgrabber/3.9.1 yum/3.4.3', 'username' : None, } } 2011-11-11 19:03:37,337 attempt 1/10: https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64 INFO:urlgrabber:attempt 1/10: https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64 2011-11-11 19:03:37,338 opening local file "/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb INFO:urlgrabber:opening local file "/var/cache/yum/x86_64/16/fedora/metalink.xml.tmp" with mode wb * About to connect() to mirrors.fedoraproject.org port 443 (#0) * Trying 140.211.169.197... * connected * Connected to mirrors.fedoraproject.org (140.211.169.197) port 443 (#0) * warning: ignoring unsupported value (1) of ssl.verifyhost * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * Certificate is signed by an untrusted issuer: 'CN=GeoTrust SSL CA,O="GeoTrust, Inc.",C=US' * NSS error -8172 * Closing connection #0 * Peer certificate cannot be authenticated with given CA certificates 2011-11-11 19:03:37,589 exception: [Errno 14] Peer cert cannot be verified or peer cert invalid INFO:urlgrabber:exception: [Errno 14] Peer cert cannot be verified or peer cert invalid 2011-11-11 19:03:37,589 retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re- raising INFO:urlgrabber:retrycode (14) not in list [-1, 2, 4, 5, 6, 7], re-raising Error: Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again * I don't understand all this stuff, but it appears that the Canadian mirrors are using untrusted certificates. Am I correct? How can I use a different mirror? -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
