Arch Linux

bikram

Member

Registered: 2024-04-14

Posts: 1

i'm getting ssl certification verification error

while trying to add mirror i get the following error

sudo reflector --latest 20 --sort rate --save /etc/pacman.d/mirrorlist --verbose
error: failed to retrieve mirrorstatus data: URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1006)>

even when trying to update i get the following

yay -Syu --noconfirm
request failed: Get "[url]https://aur.archlinux.org/rpc?arg%5B%5D=aic94xx-firmware&arg%5B%5D=ast-firmware&arg%5B%5D=electron21&arg%5B%5D=gfbgraph&arg%5B%5D=gklib&arg%5B%5D=gnome-books&arg%5B%5D=google-chrome-dev&arg%5B%5D=ipw2200-fw&arg%5B%5D=libldap24&arg%5B%5D=libsidplay&arg%5B%5D=libvterm01&arg%5B%5D=llvm15-libs&arg%5B%5D=metis&arg%5B%5D=mkinitcpio-firmware&arg%5B%5D=mongodb-bin&arg%5B%5D=mongodb-bin-debug&arg%5B%5D=mongosh-bin&arg%5B%5D=mongosh-bin-debug&arg%5B%5D=msodbcsql&arg%5B%5D=mssql-server&arg%5B%5D=mssql-server-debug&arg%5B%5D=mssql-tools&arg%5B%5D=nvm&arg%5B%5D=onlyoffice-bin&arg%5B%5D=openssl-1.0&arg%5B%5D=speedtest&arg%5B%5D=ttf-font-awesome-4&arg%5B%5D=upd72020x-fw&arg%5B%5D=viber&arg%5B%5D=vino&arg%5B%5D=visual-studio-code-bin&arg%5B%5D=visual-studio-code-bin-debug&arg%5B%5D=wd719x-firmware&arg%5B%5D=webkit2gtk-5.0&arg%5B%5D=yay&arg%5B%5D=yay-debug&type=info&v=5[/url]": tls: failed to verify certificate: x509: certificate signed by unknown authority

Last edited by bikram (2024-04-14 12:29:02)

seth

Member

Registered: 2012-09-03

Posts: 51,755

Re: i'm getting ssl certification verification error

You can filter for http-only mirrors "--protocol http"

pacman -Qikk ca-certificates-mozilla ca-certificates-utils

Are you
* trying to add a local (https) mirror?
* behind a corporate firewall, vpn or anything else that might qualify as MitM-by-accident?
* running on wrong system time?

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc