centos6 yum报错 [Errno 14] problem making ssl connection Trying other mirror

问题描述

[Errno 14] problem making ssl connection Trying other mirror.

这个问题类似于Centrify Yum repo fails with [Errno 14] problem making ssl connection。简单说就是ssl证书问题。

解决一：

#这点repo可以是你需要安装的别的repo。例如virtio-win.repo。更改对应的repo就行。
vim /etc/yum.repos.d/epel.repo
[epel]
name=Extra Packages for Enterprise Linux 6 - $basearch
baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
将baseurl注释去掉，为mirrorlist加上注释。然后将enabeld=1变为0，禁用ssl证书验证。

然后安装下面两个东西：

yum install ca-certificates
yum update curl
然后再将enable设置为1即可

但是我更改完后，并没有解决。

解决二：

原因:

On RHEL based systems (6.7 or older) when the above error is seen, it is caused by support for TLS 1.0 and 1.1 being deprecated for SSL。
说人话，就是你系统的tls版本太低，ssl协议不支持了。

解决:

To force SSL to start using TLS v1.2, the following packages plus any of dependencies must be updated to the latest:
利用新的命令，更新ssl。

yum
curl
openssl
nss

具体操作步骤：

1) yum-config-manager --disable centrify.repo
2) yum clean all
3) yum update yum
4) yum update curl
5) yum update openssl
6) yum update nss
7) yum-config-manager --enable centrify.repo

这样搞完后，我的问题解决了！

参考文档：https://centrify.force.com/support/Article/KB-11461-Centrify-Yum-repo-fails-with-Errno-14-problem-making-ssl-connection/