Bug ID 1078343
Summary kiwi needs to be updated with newer SSL certificate authorities
Classification openSUSE
Product openSUSE Distribution
Version Leap 42.3
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Basesystem
Assignee bnc-team-screening@forge.provo.novell.com
Reporter archie.cobbs@gmail.com
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

I'm trying to use kiwi to build an image, and I'm specifying one of my own RPM
repositories which is accessed over SSL.

This RPM respository is correctly configured with a legitimate SSL certificate
signed by Let's Encrypt. verified by curl(1) and Firefox (green lock symbol).

This site is https://ops2.guidewaycare.com/ .. it is password protected, but no
matter, even viewing the error page shows that the SSL certificate is valid.

However, when kiwi runs, the build fails with this error:

  Download (curl) error for
'https://username@ops2.guidewaycare.com/repo/rpm/42.3/noarch/gwc-rpm-scripts-1.0.0.67.gfaa3f10-1.opensuse42.3.noarch.rpm':
  Error code: Curl error 60
  Error message: SSL certificate problem: unable to get local issuer
certificate

  Problem occurred during or after installation or removal of packages:
  Installation aborted by user
  Please see the above error message for a hint.

Please update kiwi with the latest SSL certificate authority roots including
Let's Encrypt. These are available here:

  https://letsencrypt.org/certificates/

Workaround: add "?ssl_verify=no" to the repository URL.


You are receiving this mail because: