禁用SSL检查rpm


15

尝试运行任何rpm命令时,出现以下错误。我不确定为什么会出现卷曲错误,但是我尝试了许多不同的选择,但都失败了。

运行CentOS7并在代理后面

[root@CentOS7]# rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
Retrieving https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
curl: (60) Peer's certificate issuer has been marked as not trusted by the user.
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
error: skipping https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm - transfer failed

因此,我根据我认为有效的网站进行了检查。

[root@CentOS7]# curl -k https://google.com
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="https://www.google.com/">here</A>.
</BODY></HTML>

我在代理后面并运行了export命令。

export https_proxy=https://USERNAME:PASSWORD@my.proxy.com:8080/

我的问题是:

  1. curl -k等于rpm等于多少?

  2. 我可以告诉curl不检查ssl证书的地方有curl.config吗?我读过这是一个坏主意,但我已经在不同的服务器上测试了两个存储库,该服务器没有给我错误也没有在代理后面。

  3. 我不能完全确定rpm与卷曲的关系,但是我假设是因为我遇到卷曲错误,而卷曲是给出错误的原因?

我为rpm和curl都做了RTM,无法弄清楚需要做什么。我确实读过我需要导入密钥或某物的地方,但是我不确定我应该在那儿做什么。


1
你为什么不yum install epel-release呢?您无需手动下载。
迈克尔·汉普顿

[root @ CentOS7]#yum install dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm加载的插件:fastermirror无法打开:dl.fedoraproject.org/pub/epel/epel-release-最新版7.noarch.rpm。正在跳过。错误:无所事事
安东尼·佛尼托

这是怎么回事?
迈克尔·汉普顿

那是我从简单地运行yum install epel-release所获得的输出,它切断了https部分的存在,但引发了该错误
Anthony Fornito

看起来不像你跑了yum install epel-release。看起来好像您粘贴了URL。再试一次。
迈克尔·汉普顿

Answers:


15

您需要做的是:

wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

如果仍然收到SSL警告,请尝试:

wget --no-check-certificate https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

那么你就可以

rpm -Uvh webtatic-release.rpm

应该显示在这里:

ll /etc/yum.repos.d
By using our site, you acknowledge that you have read and understand our Cookie Policy and Privacy Policy.
Licensed under cc by-sa 3.0 with attribution required.