http://bugzilla.opensuse.org/show_bug.cgi?id=1078343 Bug ID: 1078343 Summary: kiwi needs to be updated with newer SSL certificate authorities Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: archie.cobbs@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- I'm trying to use kiwi to build an image, and I'm specifying one of my own RPM repositories which is accessed over SSL. This RPM respository is correctly configured with a legitimate SSL certificate signed by Let's Encrypt. verified by curl(1) and Firefox (green lock symbol). This site is https://ops2.guidewaycare.com/ .. it is password protected, but no matter, even viewing the error page shows that the SSL certificate is valid. However, when kiwi runs, the build fails with this error: Download (curl) error for 'https://username@ops2.guidewaycare.com/repo/rpm/42.3/noarch/gwc-rpm-scripts-...': Error code: Curl error 60 Error message: SSL certificate problem: unable to get local issuer certificate Problem occurred during or after installation or removal of packages: Installation aborted by user Please see the above error message for a hint. Please update kiwi with the latest SSL certificate authority roots including Let's Encrypt. These are available here: https://letsencrypt.org/certificates/ Workaround: add "?ssl_verify=no" to the repository URL. -- You are receiving this mail because: You are on the CC list for the bug.