the root ca certs on the server are updated on the server recently.
i can run this command on the server fine
## openssl s_client -connect [repo.percona.com:443](http://repo.percona.com:443
1 Like
[root@6329caa8bde3 opt]# yum install --disablerepo percona-ppg-11 --disablerepo epel --disablerepo pmm2-server --disablerepo percona-release-x86_64 --disablerepo percona-release-noarch ca-certificates
Loaded plugins: changelog, fastestmirror, ovl
Loading mirror speeds from cached hostfile
* base: mirror.us.oneandone.net
* extras: mirror.steadfastnet.com
* updates: ftp.usf.edu
base | 3.6 kB 00:00:00
extras | 2.9 kB 00:00:00
prel-release-noarch | 1.5 kB 00:00:00
updates | 2.9 kB 00:00:00
(1/5): prel-release-noarch/7/primary | 1.2 kB 00:00:00
(2/5): extras/7/x86_64/primary_db | 243 kB 00:00:00
(3/5): base/7/x86_64/group_gz | 153 kB 00:00:00
(4/5): base/7/x86_64/primary_db | 6.1 MB 00:00:02
(5/5): updates/7/x86_64/primary_db | 12 MB 00:00:02
prel-release-noarch 5/5
Resolving Dependencies
--> Running transaction check
---> Package ca-certificates.noarch 0:2020.2.41-70.0.el7_8 will be updated
---> Package ca-certificates.noarch 0:2021.2.50-72.el7_9 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================================================================
Package Arch Version Repository Size
================================================================================================================================
Updating:
ca-certificates noarch 2021.2.50-72.el7_9 updates 379 k
Transaction Summary
================================================================================================================================
Upgrade 1 Package
Total download size: 379 k
Is this ok [y/d/N]: y
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
ca-certificates-2021.2.50-72.el7_9.noarch.rpm | 379 kB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : ca-certificates-2021.2.50-72.el7_9.noarch 1/2
Cleanup : ca-certificates-2020.2.41-70.0.el7_8.noarch 2/2
Verifying : ca-certificates-2021.2.50-72.el7_9.noarch 1/2
Verifying : ca-certificates-2020.2.41-70.0.el7_8.noarch 2/2
Updated:
ca-certificates.noarch 0:2021.2.50-72.el7_9
Complete!
1 Like
there was a corporate change on using zscaler trust certs and i had to update the new certificate inside docker.
copy the cert to /etc/pki/ca-trust/source/anchors/ZscalerRootCertificate.crt
and run “update-ca-trust”
Now i can see the latest version.
3 Likes