SSL CA cert (path? Permissions?)

Question

I am using CentOs 6.6 64bit and have a problem when using curl. The server mainly hosts several Wordpress blogs using apache and mysql.

My easiest way to generate an error is with the following yum command, which displays below

yum list "ca-certi*" Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=x86_64 error was 14: PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)" * base: cosmos.cites.illinois.edu * epel: mirror.cogentco.com * extras: mirrors.rit.edu * updates: mirrors.rit.edu Installed Packages ca-certificates.noarch 2014.1.98-65.1.el6 @base 

Soutions have tried and still haven’t been able to rely on googling around

1) I tried restarting the VPS, no good

2) Running curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt with no luck

3) This solution was unimportant as it relies on yum to solve the SSL problem that yum also suffers http://syslint.com/syslint/curl-77-problem-with-the-ssl-ca-cert-path-access -rights-solved /

Can I run these yum steps to install using wget ?, do you think this will help?

 # yum reinstall ca-certificates # yum reinstall openssl 

I think Virtualmin has installed some updates in the last 24 hours, is there an update log in which it worked somewhere?

Can anyone help get around this problem? The problem is with the SSL CA problem (path? Permissions?). "

TIA

Answer 1

it worked for me: centos 6

mkdir / usr / src / ca-certificates && & cd / usr / src / ca-certificates

Wget http://mirror.centos.org/centos/6/os/x86_64/Packages/ca-certificates-2015.2.6-65.0.1.el6_7.noarch.rpm

rpm2cpio ca-certificates-2015.2.6-65.0.1.el6_7.noarch.rpm | cpio -idmv

cp -pi./etc/pki/tls/certs/ca-bundle.*/etc/pki/tls/certs/

do yes to override

to check:

curl -vvv https://www.unixy.net

Answer 2

The solution is from here https://www.virtualmin.com/node/35857

nss-softokn terminates yum / rpm on CentOS 6. To fix this, follow these steps:

wget http://mirror.centos.org/centos/6/updates/x86_64/Packages/nss-softokn-fr ...

rpm2cpio nss-softokn-freebl-3.14.3-19.el6_6.x86_64.rpm | cpio -idmv

cd lib64

cp libfreeblpriv3. * / lib64

yum updaten

Answer 3

A simpler solution for centos 6/7. Remove ca and reinstall the certificate.

 rm -f /etc/ssl/certs/ca-bundle.crt && yum reinstall -y ca-certificates 

The problem is that if you only reinstall the certificates. This will not replace ca-bundle. Leave it new with the name .rpmnew.