Hi, Is your SLES 12 up to date? The SLES12SP4 - Pool and Updates repositories are being used and zypper refresh && zypper update tells me it is up to date. This is a freshly installed machine. The DST Root CA X3 was removed from our CA Bundle to avoid triggering this problem. Ciao, Marcus On Tue, Dec 07, 2021 at 01:07:09PM +0000, Mathias Radtke wrote:
Hi we are currently struggling with testing our sles12 packages on download.opensuse.org
The certificate gets rejected because it is expired
openssl s_client -showcerts -connect download.opensuse.org:443
CONNECTED(00000003)
depth=3 O = Digital Signature Trust Co., CN = DST Root CA X3
verify error:num=10:certificate has expired
notAfter=Sep 30 14:01:15 2021 GMT
---
Certificate chain
0 s:/CN=opensuse.org
i:/C=US/O=Let's Encrypt/CN=R3