Archived

This forum has been archived. Please start a new discussion on GitHub.

installing 3.5 on Centos 6.3

Hello, trying to install 3.5 on Centos 6.3 using the yum repo. Failed to make ssl connection, session copied below. Suggestions appreciated. Thanks.

===========================================================
[root@lbti-nomic ~]# cat > /etc/yum.repos.d/zeroc-ice-el6.repo 
[zeroc-ice]
name=Ice 3.5 for RHEL $releasever - $basearch
baseurl=http://www.zeroc.com/download/Ice/3.5/el$releasever/$basearch
enabled=1
gpgcheck=1
gpgkey=http://www.zeroc.com/download/RPM-GPG-KEY-zeroc-release
[root@lbti-nomic ~]# yum list ice* db53* mcpp-devel
Loaded plugins: fastestmirror, refresh-packagekit, security
Loading mirror speeds from cached hostfile
 * base: repos.dfw.quadranet.com
 * extras: mirrors.usinternet.com
 * updates: mirrors.kernel.org
[url]http://www.zeroc.com/download/Ice/3.5/el6/i386/repodata/repomd.xml:[/url] [Errno 14] problem making ssl connection
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: zeroc-ice. Please verify its path and try again

Comments

  • joegeorge
    joegeorge Jupiter, Florida
    Hi Elwood,

    Sorry to hear you're having issues. We recently upgraded our web servers to use https and our configuration settings were a little too strong for older operating systems.

    I've modified the configuration to relax these settings, so you should be able to connect now.

    Please let us know if you have further issues.

    Cheers,
    Joe
  • Hi Joe, it works great now, thanks much.

    Elwood
  • Hi!

    We are seeing a similar error while trying to mirror the 3.5 download url ( https://zeroc.com/download/Ice/3.5/el6/x86_64/ ) to our local mirror



    FWIW we are on CentOS 6.7 using a tool called mrepo to mirror the repo, the underlying binary that is actually trying to run the mirroring is lftp.



    ```
    Verbosity set to level 3
    Using configfile /etc/mrepo.conf
    Reading config file /etc/mrepo.conf
    Setting option confdir in section [main] to: /etc/mrepo.conf.d
    Setting option srcdir in section [main] to: /mrepo
    Setting option wwwdir in section [main] to: /mrepo/www
    Setting option arch in section [main] to: x86_64
    Setting option hardlink in section [main] to: yes
    Setting option mountcmd in section [main] to: /usr/bin/fuseiso
    Reading config file /etc/mrepo.conf.d/repos.conf
    Setting option arch in section [centos6] to: x86_64
    Setting option arch in section [centos7] to: x86_64
    centos6-x86_64: Mount ISO CentOS-6.7-x86_64-bin-DVD1.iso to /mrepo/www/centos6-x86_64/disc1
    centos6-x86_64: Mount ISO CentOS-6.7-x86_64-bin-DVD2.iso to /mrepo/www/centos6-x86_64/disc2
    centos6-x86_64: Updating CentOS 6 (x86_64)
    centos6-x86_64: Mirror packages from https://zeroc.com/download/Ice/3.5/el6/x86_64/ to /mrepo/centos6-x86_64/ice

    cd `/download/Ice/3.5/el6/x86_64/' [Connecting...]

    Transferring file `db53-5.3.21-1ice.el6.x86_64.rpm'
    `...-5.3.21-1ice.el6.x86_64.rpm' at 0 (0%) [Waiting for response...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `db53-devel-5.3.21-1ice.el6.x86_64.rpm'
    `...-5.3.21-1ice.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `db53-java-5.3.21-1ice.el6.x86_64.rpm'
    `...-5.3.21-1ice.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `db53-utils-5.3.21-1ice.el6.x86_64.rpm'
    `...-5.3.21-1ice.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-3.5.0-1.el6.noarch.rpm'
    `ice-3.5.0-1.el6.noarch.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-3.5.1-1.el6.noarch.rpm'
    `ice-3.5.1-1.el6.noarch.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-java-3.5.0-1.el6.noarch.rpm'
    `...java-3.5.0-1.el6.noarch.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-java-3.5.1-1.el6.noarch.rpm'
    `...java-3.5.1-1.el6.noarch.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-java-devel-3.5.0-1.el6.x86_64.rpm'
    `...evel-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-java-devel-3.5.1-1.el6.x86_64.rpm'
    `...evel-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-libs-3.5.0-1.el6.x86_64.rpm'
    `...libs-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-libs-3.5.1-1.el6.x86_64.rpm'
    `...libs-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-php-3.5.0-1.el6.x86_64.rpm'
    `ice-php-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-php-3.5.1-1.el6.x86_64.rpm'
    `ice-php-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-php-devel-3.5.0-1.el6.x86_64.rpm'
    `...evel-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-php-devel-3.5.1-1.el6.x86_64.rpm'
    `...evel-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-python-3.5.0-1.el6.x86_64.rpm'
    `...thon-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-python-3.5.1-1.el6.x86_64.rpm'
    `...thon-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-python-devel-3.5.0-1.el6.x86_64.rpm'
    `...evel-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-python-devel-3.5.1-1.el6.x86_64.rpm'
    `...evel-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-ruby-3.5.0-1.el6.x86_64.rpm'
    `...ruby-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-ruby-3.5.1-1.el6.x86_64.rpm'
    `...ruby-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-ruby-devel-3.5.0-1.el6.x86_64.rpm'
    `...evel-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-ruby-devel-3.5.1-1.el6.x86_64.rpm'
    `...evel-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-servers-3.5.0-1.el6.x86_64.rpm'
    `...vers-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-servers-3.5.1-1.el6.x86_64.rpm'
    `...vers-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-utils-3.5.0-1.el6.x86_64.rpm'
    `...tils-3.5.0-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `ice-utils-3.5.1-1.el6.x86_64.rpm'
    `...tils-3.5.1-1.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    Transferring file `mcpp-devel-2.7.2-2ice.el6.x86_64.rpm'
    `...l-2.7.2-2ice.el6.x86_64.rpm' at 0 [Connecting...]

    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    repodata: Getting directory contents (0) [Connecting...]

    mrepo: Mirroring failed for https://zeroc.com/download/Ice/3.5/el6/x86_64/ with message:
    Failed with return code: 7424
    centos6-x86_64: Generating CentOS 6 (x86_64) meta-data
    Verbosity set to level 3
    Using configfile /etc/mrepo.conf
    Reading config file /etc/mrepo.conf
    Setting option confdir in section [main] to: /etc/mrepo.conf.d
    Setting option srcdir in section [main] to: /mrepo
    Setting option wwwdir in section [main] to: /mrepo/www
    Setting option arch in section [main] to: x86_64
    Setting option hardlink in section [main] to: yes
    Setting option mountcmd in section [main] to: /usr/bin/fuseiso
    Reading config file /etc/mrepo.conf.d/repos.conf
    Setting option arch in section [centos6] to: x86_64
    Setting option arch in section [centos7] to: x86_64
    centos6-x86_64: Unmount ISO CentOS-6.7-x86_64-bin-DVD1.iso from /mrepo/www/centos6-x86_64/disc1
    centos6-x86_64: Unmount ISO CentOS-6.7-x86_64-bin-DVD2.iso from /mrepo/www/centos6-x86_64/disc2
    ```

  • joegeorge
    joegeorge Jupiter, Florida
    edited April 2016
    Hi Tim,

    I tried this and it appears to be an issue with the GnuTLS version used by lftp when it tries to connect to our CDN (Amazon Cloudfront).

    I enabled lftp tracing in ~/.lftprc and this is the error I see:
    GNUTLS: EXT[0x216dd10]: Sending extension CERT_TYPE
    GNUTLS: EXT[0x216dd10]: Sending extension SAFE_RENEGOTIATION
    GNUTLS: HSK[0x216dd10]: CLIENT HELLO was sent [93 bytes]
    GNUTLS: REC[0x216dd10]: Sending Packet[0] Handshake(22) with length: 93
    GNUTLS: REC[0x216dd10]: Sent Packet[1] Handshake(22) with length: 98
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_buffers.c:322
    GNUTLS: XXX[]: ret: -28 Resource temporarily unavailable, try again.
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: REC[0x216dd10]: Expected Packet[0] Handshake(22) with length: 1
    GNUTLS: REC[0x216dd10]: Received Packet[0] Alert(21) with length: 2
    GNUTLS: REC[0x216dd10]: Decrypted Packet[0] Alert(21) with length: 2
    GNUTLS: REC[0x216dd10]: Alert[2|40] - Handshake failed - was received
    GNUTLS: ASSERT: gnutls_record.c:695
    GNUTLS: ASSERT: gnutls_record.c:1060
    GNUTLS: ASSERT: gnutls_buffers.c:1032
    GNUTLS: ASSERT: gnutls_handshake.c:2700
    **** send: gnutls_handshake: A TLS fatal alert has been received.
    **** recv: gnutls_handshake: A TLS fatal alert has been received.
    ---- Closing HTTP connection
    mirror: Fatal error: gnutls_handshake: A TLS fatal alert has been received.
    

    You can use a non-https address to work around this issue. For example: "http://zeroc.com/download/rpm/el6/$arch".

    Edit: Our of curiosity I tried on CentOS 7. Everything worked fine there with SSL/TLS.

    Cheers,
    Joe
  • Hey Joe,

    When I try to hit
    http://download.zeroc.com/rpm/el6/x86_64/

    I get

    <Error>
    <Code>NoSuchKey</Code>
    <Message>The specified key does not exist.</Message>
    <Key>rpm/el6/x86_64/</Key>
    <RequestId>D01FBBDE246A126C</RequestId>
    <HostId>
    RQQkkl6A8O271lxbuprCRbZOOntV8KxPmy5nGwickV2Av+8h8FVM83YFQSVt/HlAT4afRmc9KfQ=
    </HostId>
    </Error>
    

    Do i have the right URL?

  • joegeorge
    joegeorge Jupiter, Florida

    Hi Tim,

    Sorry, the url should be http://zeroc.com/download/rpm/el6/x86_64/

  • Awesome! That totally works! Thanks so much for the help!

  • Hi,

    for repo mirrorring is better to use reposync. In case you want to reconsider.