Bug ID | 1078343 |
---|---|
Summary | kiwi needs to be updated with newer SSL certificate authorities |
Classification | openSUSE |
Product | openSUSE Distribution |
Version | Leap 42.3 |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Basesystem |
Assignee | bnc-team-screening@forge.provo.novell.com |
Reporter | archie.cobbs@gmail.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
I'm trying to use kiwi to build an image, and I'm specifying one of my own RPM repositories which is accessed over SSL. This RPM respository is correctly configured with a legitimate SSL certificate signed by Let's Encrypt. verified by curl(1) and Firefox (green lock symbol). This site is https://ops2.guidewaycare.com/ .. it is password protected, but no matter, even viewing the error page shows that the SSL certificate is valid. However, when kiwi runs, the build fails with this error: Download (curl) error for 'https://username@ops2.guidewaycare.com/repo/rpm/42.3/noarch/gwc-rpm-scripts-1.0.0.67.gfaa3f10-1.opensuse42.3.noarch.rpm': Error code: Curl error 60 Error message: SSL certificate problem: unable to get local issuer certificate Problem occurred during or after installation or removal of packages: Installation aborted by user Please see the above error message for a hint. Please update kiwi with the latest SSL certificate authority roots including Let's Encrypt. These are available here: https://letsencrypt.org/certificates/ Workaround: add "?ssl_verify=no" to the repository URL.