From: Davenport, Julie <JDavenport@ctcd.edu>
To: Magnus Hagander <magnus@hagander.net>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: RE: cannot reach repository pgdg94/7Server/x86_64
Date: Tue, 18 Dec 2018 16:02:26 +0000
Message-ID: <1a5d5ba839214b2f82bc8805482f13f6@ctcd.edu> (raw)
In-Reply-To: <CABUevEzEUpEeophJCdePn1HJUhANKqc09raRU66LMKdXr_EYSQ@mail.gmail.com>
References: <ee8665e82859490f8da9d2b488a29ef9@ctcd.edu>
<CABUevEzEUpEeophJCdePn1HJUhANKqc09raRU66LMKdXr_EYSQ@mail.gmail.com>
Hello Magnus, and thank you for your reply. You are correct, I was missing a certificate on my server. Two automatically created CA certificate bundle files (.pem and .crt) had somehow been wiped out by my renewal process. I restored them from a similar server and now I have no problem reaching the postgres repository. Happy days! Julie
From: Magnus Hagander [mailto:magnus@hagander.net]
Sent: Tuesday, December 18, 2018 3:40 AM
To: Davenport, Julie <JDavenport@ctcd.edu>
Cc: pgsql-admin@postgresql.org
Subject: Re: cannot reach repository pgdg94/7Server/x86_64
On Tue, Dec 18, 2018 at 10:38 AM Davenport, Julie <JDavenport@ctcd.edu<mailto:JDavenport@ctcd.edu>> wrote:
Hello,
Last week I had to renew a self-signed certificate on when of my RHEL 7 servers that uses Postgresql 9.4, and since then I am not able to reach the pgdg94/7Server/x86_64 repository when I try to check for yum updates. We had installed postgres on this server using yum and all updates to it since then using yum, and never had an issue before. Now I get this error:
https://download.postgresql.org/pub/repos/yum/9.4/redhat/rhel-7Server-x86_64/repodata/repomd.xml: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"
Trying other mirror.
I consulted with Redhat and they said there's likely a certificate that got removed during my renewal process that needs to be reimported, but since it's not Red Hat's repository they can’t help with the certificate or process to reinstall it.
I’m searching in the postgres maillists on the repository name and but I cannot find documentation on how to reach this repository or what is required, or the certificate issue. Any suggestions?
Hi!
This repository uses a standard public LetsEncrypt certificate. You can try accessing that URL in your browser and you will see that it works. You may be missing a root certificate in your system somewhere - there is no PostgreSQL specific root or cert required.
--
Magnus Hagander
Me: https://www.hagander.net/<http://www.hagander.net/;
Work: https://www.redpill-linpro.com/<http://www.redpill-linpro.com/;
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: JDavenport@ctcd.edu, magnus@hagander.net
Subject: RE: cannot reach repository pgdg94/7Server/x86_64
In-Reply-To: <1a5d5ba839214b2f82bc8805482f13f6@ctcd.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox