dnf fails with ssl error

[rcarlino-work]

Describe the bug
When trying to install apps thru dnf get the following error
whitewaterfoundry_fedoraremix 0.0 B/s | 0 B 00:08
Errors during downloading metadata for repository 'whitewaterfoundry_fedoraremix':

• Curl error (60): SSL peer certificate or SSH remote key was not OK for https://packagecloud.io/whitewaterfoundry/fedoraremix/fedora/38/x86_64/repodata/repomd.xml [SSL certificate problem: unable to get local issuer certificate]
  Error: Failed to download metadata for repo 'whitewaterfoundry_fedoraremix': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
  rcarlino@FINLHZNJ114:~$ sudo dnf install sshpass
  whitewaterfoundry_fedoraremix 0.0 B/s | 0 B 00:08
  Errors during downloading metadata for repository 'whitewaterfoundry_fedoraremix':
• Curl error (60): SSL peer certificate or SSH remote key was not OK for https://packagecloud.io/whitewaterfoundry/fedoraremix/fedora/38/x86_64/repodata/repomd.xml [SSL certificate problem: unable to get local issuer certificate]
  Error: Failed to download metadata for repo 'whitewaterfoundry_fedoraremix': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

To Reproduce
Steps to reproduce the behavior:
run dnf update

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

Basic Troubleshooting Checklist

[ ] I have searched Google for the error message.
[ ] I have checked official WSL troubleshooting documentation: https://docs.microsoft.com/en-us/windows/wsl/troubleshooting#confirm-wsl-is-enabled.
[ ] I have searched the official Microsoft WSL issues page: https://github.com/Microsoft/WSL/issues.
[ ] I have searched the WLinux issues page: https://github.com/WhitewaterFoundry/WLinux/issues.
[ ] I have reset WLinux: Settings->Apps->Apps & features->WLinux->Advanced Options->Reset.
[ ] I have disabled and re-enabled WSL in Windows Features.
[ ] I have run Windows 10 updates and restarted.

What other troubleshooting have you attempted?

Insert here:

Fedora Remix for WSL Version

Find: Settings->Apps->Apps & features->Fedora Remix for WSL Version->Advanced Options->Version.
Also, cat /etc/os-release
Generic release 39 (Generic)
Insert here:

Windows Build
Microsoft Windows [Version 10.0.22621.3007]
(c) Microsoft Corporation. All rights reserved.

C:\Users\rcarlino>systeminfo | findstr /C:"OS
OS Name: Microsoft Windows 11 Pro
OS Version: 10.0.22621 N/A Build 22621
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
BIOS Version: Dell Inc. 1.7.0, 11/13/2023

For help on retrieving: https://docs.microsoft.com/en-us/windows/wsl/troubleshooting#check-your-build-number

[crramirez]

Hello @rcarlino-work,

Thanks for reporting. Sometimes the repos have connection problems. If the problem persist, try running the update.sh script.

Also, you can manually refresh the whitewater foundry repos doing:

source /etc/os-release
curl -s https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/script.rpm.sh | sudo env os=fedora dist="${VERSION_ID}" bash

Hope it helps.

[rcarlino-work]

Seems I can't do any external ssl. I did just switch to windows 11 maybe there is something I am missing. See below update.sh % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 4968 100 4968 0 0 14912 0 --:--:-- --:--:-- --:--:-- 14963 Fedora 39 - x86_64 - Updates 44 kB/s | 24 kB 00:00 Fedora 39 - x86_64 - Updates 2.5 MB/s | 5.0 MB 00:02 whitewaterfoundry_fedoraremix 0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'whitewaterfoundry_fedoraremix': - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://packagecloud.io/whitewaterfoundry/fedoraremix/fedora/38/x86_64/repodata/repomd.xml [SSL certificate problem: unable to get local issuer certificate] Error: Failed to download metadata for repo 'whitewaterfoundry_fedoraremix': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried sudo dnf install dig whitewaterfoundry_fedoraremix 0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'whitewaterfoundry_fedoraremix': - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://packagecloud.io/whitewaterfoundry/fedoraremix/fedora/38/x86_64/repodata/repomd.xml [SSL ertificate problem: unable to get local issuer certificate] Error: Failed to download metadata for repo 'whitewaterfoundry_fedoraremix': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried From: Carlos Rafael Ramirez ***@***.***> Sent: Sunday, January 21, 2024 1:37 PM To: WhitewaterFoundry/Fedora-Remix-for-WSL ***@***.***> Cc: Carlino, Ray ***@***.***>; Mention ***@***.***> Subject: [EXT] Re: [WhitewaterFoundry/Fedora-Remix-for-WSL] dnf fails with ssl error (Issue #215) Hello @rcarlino-work<https://github.com/rcarlino-work>, Thanks for reporting. Sometimes the repos have connection problems. If the problem persist, try running the update.sh script. Also, you can manually refresh the whitewater foundry repos doing: source /etc/os-release curl -s https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/script.rpm.sh | sudo env os=fedora dist="${VERSION_ID}" bash Hope it helps. - Reply to this email directly, view it on GitHub<#215 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ATUQTDF3U5JGOQAYQHJLHCTYPV4APAVCNFSM6AAAAABCCJXARSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMBSG42TIOJZHA>. You are receiving this because you were mentioned.Message ID: ***@***.******@***.***>> "FINASTRA" is the trade name of the FINASTRA group of companies. This email and any attachments have been scanned for known viruses using multiple scanners. This email message is intended for the named recipient only. It may be privileged and/or confidential. If you are not the named recipient of this email please notify us immediately and do not copy it or use it for any purpose, nor disclose its contents to any other person. This email does not constitute the commencement of legal relations between you and FINASTRA. Please refer to the executed contract between you and the relevant member of the FINASTRA group for the identity of the contracting party with which you are dealing.

[crramirez]

Download this with your browser https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/script.rpm.sh and execute it as follows

source /etc/os-release
export os=fedora
export dist="${VERSION_ID}"
sudo bash script.rpm.sh

[rcarlino-work]

***@***.***:/mnt/c/temp/linux$ source /etc/os-release ***@***.***:/mnt/c/temp/linux$ export os=fedora ***@***.***:/mnt/c/temp/linux$ export dist="${VERSION_ID}" ***@***.***:/mnt/c/temp/linux$ sudo bash script.rpm.sh Detected operating system as fedoraremixforwsl/39. Checking for curl... Detected curl... Downloading repository file: https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/config_file.repo?os=fedoraremixforwsl&dist=39&source=script curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. curl is unable to connect to packagecloud.io over TLS when running: curl https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/config_file.repo?os=fedoraremixforwsl&dist=39&source=script This is usually due to one of two things: 1.) Missing CA root certificates (make sure the ca-certificates package is installed) 2.) An old version of libssl. Try upgrading libssl on your system to a more recent version Contact ***@***.******@***.***> with information about your system for help. From: Carlos Rafael Ramirez ***@***.***> Sent: Wednesday, January 24, 2024 5:48 AM To: WhitewaterFoundry/Fedora-Remix-for-WSL ***@***.***> Cc: Carlino, Ray ***@***.***>; Mention ***@***.***> Subject: [EXT] Re: [WhitewaterFoundry/Fedora-Remix-for-WSL] dnf fails with ssl error (Issue #215) Download this with your browser https://packagecloud.io/install/repositories/whitewaterfoundry/fedoraremix/script.rpm.sh and execute it as follows source /etc/os-release export os=fedora export dist="${VERSION_ID}" sudo bash script.rpm.sh - Reply to this email directly, view it on GitHub<#215 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ATUQTDEM33SUVXBOHRZ6KOTYQD7GHAVCNFSM6AAAAABCCJXARSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSMBYGA2TOOBUGQ>. You are receiving this because you were mentioned.Message ID: ***@***.******@***.***>> "FINASTRA" is the trade name of the FINASTRA group of companies. This email and any attachments have been scanned for known viruses using multiple scanners. This email message is intended for the named recipient only. It may be privileged and/or confidential. If you are not the named recipient of this email please notify us immediately and do not copy it or use it for any purpose, nor disclose its contents to any other person. This email does not constitute the commencement of legal relations between you and FINASTRA. Please refer to the executed contract between you and the relevant member of the FINASTRA group for the identity of the contracting party with which you are dealing.