Page 1 of 3 123 LastLast
Results 1 to 10 of 24

Thread: Can not add NVIDIA repository

  1. #1
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Can not add NVIDIA repository

    I want install NVIDIA driver like there but there is error like this:
    Code:
    linux-xw9x:/home/atesozgur # zypper inr -r NVIDIA
    Retrieving repository 'NVIDIA' metadata ------------------------------------------------
    'https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml' için indirme(curl) 
    Hata kodu: Curl error 60
    Hata raporu: SSL certificate problem: self signed certificate in certificate chain
    
    Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): r
    Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): a
    Retrieving repository 'NVIDIA' metadata ................................................
    Repository 'NVIDIA' is invalid.
    [NVIDIA|https://download.nvidia.com/opensuse/leap/42.3] Valid metadata not found at spec
    Please check if the URIs defined for this repository are pointing to a valid repository.
    Warning: Üstteki hatadan dolayı 'NVIDIA' deposu atlanıyor.
    Some of the repositories have not been refreshed because of an error.
    Loading repository data...
    Reading installed packages...
    Resolving package dependencies...
    
    Nothing to do.

  2. #2
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    13,295
    Blog Entries
    2

    Default Re: Can not add NVIDIA repository

    Before running that command, did you refresh your repos?
    You should have been prompted to accept the repo's GPG key then, to avoid the cURL error you're getting.

    Else, run the following which auto-accepts the GPG key.
    Code:
    zypper --gpg-auto-import-keys ref
    Then, you should be able to run your command.

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  3. #3
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Re: Can not add NVIDIA repository

    Quote Originally Posted by tsu2 View Post
    Before running that command, did you refresh your repos?
    You should have been prompted to accept the repo's GPG key then, to avoid the cURL error you're getting.

    Else, run the following which auto-accepts the GPG key.
    Code:
    zypper --gpg-auto-import-keys ref
    Then, you should be able to run your command.
    Yes, I did.
    When I enter
    Code:
    zypper --gpg-auto-import-keys ref
    I get:
    Code:
    zypper --gpg-auto-import-keys ref
    Retrieving repository 'NVIDIA' metadata ---------------------------------------------[\]
    'https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml' için indirme(curl) hatası:
    Hata kodu: Curl error 60
    Hata raporu: SSL certificate problem: self signed certificate in certificate chain
    
    Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): r
    Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): a
    Retrieving repository 'NVIDIA' metadata .........................................[error]
    Repository 'NVIDIA' is invalid.
    [NVIDIA|https://download.nvidia.com/opensuse/leap/42.3] Valid metadata not found at specified URL
    Please check if the URIs defined for this repository are pointing to a valid repository.
    Üstteki hatadan dolayı 'NVIDIA' deposu atlanıyor.
    Retrieving repository 'Packman Repository' metadata ..............................[done]
    'Packman Repository' depo önbelleği oluşturuluyor ................................[done]
    Repository 'openSUSE-Tumbleweed-Non-Oss' is up to date.                                 
    Repository 'openSUSE-Tumbleweed-Oss' is up to date.                                     
    Repository 'openSUSE-Tumbleweed-Update' is up to date.                                  
    Some of the repositories have not been refreshed because of an error.

  4. #4
    Join Date
    Sep 2012
    Posts
    6,832

    Default Re: Can not add NVIDIA repository

    1. Please always run commands you intend to post here in English locale so that others also understand their output.
    2. The simplest workaround is to use HTTP instead of HTTPS.
    3. If you want to debug what happens, post output of
    Code:
    echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 | openssl x509 -inform pem -noout -text
    Please, copy and paste full command invocation and its output including final shell prompt.

  5. #5
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Re: Can not add NVIDIA repository

    Quote Originally Posted by arvidjaar View Post
    1. Please always run commands you intend to post here in English locale so that others also understand their output.
    2. The simplest workaround is to use HTTP instead of HTTPS.
    3. If you want to debug what happens, post output of
    Code:
    echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 | openssl x509 -inform pem -noout -text
    Please, copy and paste full command invocation and its output including final shell prompt.
    Thank for your comment.
    Code:
    depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
    verify return:1
    depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
    verify return:1
    depth=0 C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
    verify return:1
    DONE
    Certificate:
        Data:
            Version: 3 (0x2)
            Serial Number:
                0b:4a:74:ce:74:39:06:28:e4:6b:5f:5f:73:af:db:a1
        Signature Algorithm: sha256WithRSAEncryption
            Issuer: C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
            Validity
                Not Before: Oct 22 00:00:00 2017 GMT
                Not After : Oct 26 12:00:00 2020 GMT
            Subject: C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption
                    Public-Key: (2048 bit)
                    Modulus:
                        00:d5:2b:76:38:aa:03:9e:15:a3:34:0e:bf:70:cc:
                        89:c7:37:d2:43:d3:e8:4f:5e:ea:70:ed:65:2a:0d:
                        bf:4f:9d:5b:42:b8:d4:5e:18:ac:3c:cc:55:8b:3a:
                        c7:20:ed:fe:66:10:42:10:2e:8e:58:fc:39:e9:7c:
                        cc:7c:85:06:3d:40:81:8a:30:99:7a:2f:09:2c:d7:
                        c6:05:b3:03:7b:c8:7e:d5:b1:9d:82:46:a6:cb:d1:
                        56:6d:9b:3e:65:a4:41:16:c3:9f:86:4f:36:80:4d:
                        1b:12:bd:b4:f5:9f:f1:2c:4c:c2:d5:21:44:7e:8b:
                        26:b1:d1:3b:82:d8:97:cd:e0:8a:23:5f:98:4e:8f:
                        a3:1f:41:7c:5f:6f:78:d5:b4:7c:36:53:1b:62:e8:
                        2c:54:94:f7:a5:a0:c3:5a:fc:b1:43:28:f4:74:72:
                        b4:32:25:1f:7f:0f:ac:15:ed:80:d1:0f:9d:b8:a4:
                        42:1d:55:f6:fe:61:1e:10:80:3a:fb:84:ec:cf:76:
                        3c:03:1c:e3:7d:f1:ef:0b:37:f2:f9:96:0c:ab:eb:
                        3b:ea:01:34:87:08:a3:0f:09:09:f4:4d:30:6b:8a:
                        50:96:da:d5:2c:c9:d6:61:5f:9f:ba:aa:e2:92:62:
                        fe:26:2a:79:2c:af:2b:44:7d:68:96:fb:ac:76:d7:
                        33:ed
                    Exponent: 65537 (0x10001)
            X509v3 extensions:
                X509v3 Authority Key Identifier: 
                    keyid:0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
    
                X509v3 Subject Key Identifier: 
                    31:DC:C2:2B:2E:2D:60:58:7B:A8:F6:50:AF:A8:74:90:2E:89:AD:7C
                X509v3 Subject Alternative Name: 
                    DNS:*.nvidia.com, DNS:nvidia.com, DNS:download.gfe.nvidia.com, DNS:download-cdn.gfe.nvidia.com, DNS:international.download.nvidia.com, DNS:download.pgroup.com, DNS:on-demand.gputechconf.com, DNS:hdprogressive.3dvisionlive.com, DNS:http.developer.nvidia.com
                X509v3 Key Usage: critical
                    Digital Signature, Key Encipherment
                X509v3 Extended Key Usage: 
                    TLS Web Server Authentication, TLS Web Client Authentication
                X509v3 CRL Distribution Points: 
    
                    Full Name:
                      URI:http://crl3.digicert.com/ssca-sha2-g1.crl
    
                    Full Name:
                      URI:http://crl4.digicert.com/ssca-sha2-g1.crl
    
                X509v3 Certificate Policies: 
                    Policy: 2.16.840.1.114412.1.1
                      CPS: https://www.digicert.com/CPS
                    Policy: 2.23.140.1.2.2
    
                Authority Information Access: 
                    OCSP - URI:http://ocsp.digicert.com
                    CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
    
                X509v3 Basic Constraints: critical
                    CA:FALSE
                CT Precertificate SCTs: 
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : A4:B9:09:90:B4:18:58:14:87:BB:13:A2:CC:67:70:0A:
                                    3C:35:98:04:F9:1B:DF:B8:E3:77:CD:0E:C8:0D:DC:10
                        Timestamp : Oct 22 19:21:00.991 2017 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:45:02:21:00:C5:31:5B:CC:34:FB:6F:0C:57:D6:08:
                                    D9:58:ED:87:F7:76:D7:FA:15:1F:67:87:3E:95:01:2C:
                                    09:3C:53:D1:AE:02:20:24:CE:8D:03:04:4F:8B:22:78:
                                    3C:EF:7D:CA:EB:5F:C8:6A:F9:58:00:07:E2:6C:F5:3D:
                                    E8:46:D5:D9:60:56:4F
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : 56:14:06:9A:2F:D7:C2:EC:D3:F5:E1:BD:44:B2:3E:C7:
                                    46:76:B9:BC:99:11:5C:C0:EF:94:98:55:D6:89:D0:DD
                        Timestamp : Oct 22 19:21:01.195 2017 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:45:02:20:23:6B:99:34:C6:28:CA:9B:85:43:80:C8:
                                    46:21:B5:02:C5:D8:51:38:99:4B:03:92:A8:32:63:9F:
                                    C2:E5:3D:93:02:21:00:8A:1C:D5:B6:39:AF:A6:10:A7:
                                    26:6D:E8:32:CE:BA:EB:DC:F4:6B:09:60:6F:06:EA:AF:
                                    B5:B2:56:C7:4E:56:B1
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : EE:4B:BD:B7:75:CE:60:BA:E1:42:69:1F:AB:E1:9E:66:
                                    A3:0F:7E:5F:B0:72:D8:83:00:C4:7B:89:7A:A8:FD:CB
                        Timestamp : Oct 22 19:21:01.752 2017 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:45:02:20:6E:0A:50:2F:65:E3:74:93:89:54:79:E2:
                                    17:26:B3:D4:9A:F8:02:14:6A:2C:A3:26:3F:40:FB:6E:
                                    1B:58:09:63:02:21:00:8B:31:1A:A7:DB:15:EB:ED:92:
                                    95:1D:51:6C:E2:B4:C0:50:0E:18:43:8A:DB:1F:13:AF:
                                    BF:EF:3D:87:9E:AB:03
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
                                    38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
                        Timestamp : Oct 22 19:21:01.177 2017 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:45:02:20:24:E5:35:66:EA:BE:33:CF:0B:7D:FE:67:
                                    D3:1F:A4:74:48:0C:CC:C7:21:68:CD:06:DD:0E:26:82:
                                    E5:19:78:EC:02:21:00:E5:CF:2C:B8:06:1D:18:77:5D:
                                    1F:14:17:28:2B:B6:63:4D:44:DF:0D:C6:E3:A5:24:19:
                                    60:D7:91:6B:B0:FD:74
        Signature Algorithm: sha256WithRSAEncryption
             18:0e:67:4b:48:07:62:4e:9f:45:81:26:e5:ec:e9:c5:f2:9b:
             ea:b7:6b:16:fa:f0:9f:21:22:29:24:49:37:a7:37:8f:51:8c:
             bc:15:02:f9:27:1a:7f:2e:85:15:29:38:e8:3c:2c:b6:b3:f3:
             06:e4:9a:c0:ea:66:e9:df:fc:8b:ea:f7:6a:05:cf:b1:1a:09:
             fa:78:42:d0:0c:63:d0:fa:9c:8f:be:d7:3f:ef:93:27:9e:9b:
             66:8a:4a:f3:71:5f:2a:7e:dc:48:ad:e0:46:44:b8:4f:50:48:
             99:83:ce:c5:d4:1e:5f:0d:c7:b5:35:22:a8:76:f3:b4:a4:4c:
             bc:33:14:04:38:55:78:43:d7:af:be:29:85:46:36:76:b2:e0:
             92:78:94:da:18:b6:87:5e:56:40:76:9f:c3:74:8b:c5:a0:18:
             d7:9e:dd:c9:7a:f2:3f:59:61:20:76:81:f2:51:d4:71:9c:da:
             0c:38:92:55:8d:3d:11:a8:30:af:6c:f3:ba:b0:a6:1e:e8:34:
             91:fd:67:96:26:d7:54:7a:34:d9:b2:3e:d9:08:4d:18:fd:2a:
             79:c9:20:23:49:2c:71:20:3a:05:2e:77:34:c0:e3:24:88:06:
             96:67:d6:59:b4:5c:17:21:23:5c:c5:ed:eb:47:ae:b1:e7:b3:
             a1:27:29:e0

  6. #6
    Join Date
    Mar 2011
    Location
    Sauerland
    Posts
    6,468

    Default AW: Can not add NVIDIA repository

    https://download.nvidia.com/opensuse...ata/repomd.xml' için indirme(curl)
    Hata kodu: Curl error 60
    That is not an Repo for Tumbleweed.

    Please post:
    Code:
    zypper lr -d
    Code:
    uname -a
    Code:
    /sbin/lspci -nnk | grep -EiA3 'vga|3d|display'

  7. #7
    Join Date
    Sep 2012
    Posts
    6,832

    Default Re: Can not add NVIDIA repository

    Quote Originally Posted by atesozgur View Post
    Code:
            Subject: C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
    This looks OK. Could you show all certificates in a chains?
    Code:
    echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 -showcerts

  8. #8
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Re: AW: Can not add NVIDIA repository

    Quote Originally Posted by Sauerland View Post
    That is not an Repo for Tumbleweed.

    Please post:
    Code:
    zypper lr -d
    Code:
    uname -a
    Code:
    /sbin/lspci -nnk | grep -EiA3 'vga|3d|display'
    The result same in Tumbleweed repo.
    Code:
    zypper lr -d
    Repository priorities are without effect. All enabled repositories share the same priority.
    
    # | Alias                                | Name                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                                      | Service
    --+--------------------------------------+-----------------------------+---------+-----------+---------+----------+--------+------------------------------------------------------------------------------------------+--------
    1 | NVIDIA                               | NVIDIA                      | Yes     | ( p) Yes  | Yes     |   99     | NONE   | https://download.nvidia.com/opensuse/tumbleweed                                          |        
    2 | openSUSE-20180502-0                  | openSUSE-20180502-0         | No      | ----      | ----    |   99     | rpm-md | hd:///?device=/dev/disk/by-id/usb-TOSHIBA_TransMemory_54B80A3FA799C181800250CF-0:0-part2 |        
    3 | packman.inode.at-openSUSE_Tumbleweed | Packman Repository          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://packman.inode.at/suse/openSUSE_Tumbleweed/                                        |        
    4 | repo-debug                           | openSUSE-Tumbleweed-Debug   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/tumbleweed/repo/oss/                                  |        
    5 | repo-non-oss                         | openSUSE-Tumbleweed-Non-Oss | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/tumbleweed/repo/non-oss/                                    |        
    6 | repo-oss                             | openSUSE-Tumbleweed-Oss     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/tumbleweed/repo/oss/                                        |        
    7 | repo-source                          | openSUSE-Tumbleweed-Source  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/tumbleweed/repo/oss/                                 |        
    8 | repo-update                          | openSUSE-Tumbleweed-Update  | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/tumbleweed/                                          |
    Code:
    uname -a
    Linux linux-xw9x 4.16.6-1-default #1 SMP PREEMPT Mon Apr 30 20:33:51 UTC 2018 (566acbc) x86_64 x86_64 x86_64 GNU/Linux
    Code:
    /sbin/lspci -nnk | grep -EiA3 'vga|3d|display'
    00:02.0 VGA compatible controller [0300]: Intel Corporation Haswell-ULT Integrated Graphics Controller [8086:0a16] (rev 0b)
            Subsystem: Lenovo Device [17aa:380d]
            Kernel driver in use: i915
            Kernel modules: i915
    --
    03:00.0 3D controller [0302]: NVIDIA Corporation GM108M [GeForce 840M] [10de:1341] (rev a2)
            Subsystem: Lenovo Device [17aa:380d]
            Kernel driver in use: nouveau
            Kernel modules: nouveau

  9. #9
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Re: Can not add NVIDIA repository

    Quote Originally Posted by arvidjaar View Post
    This looks OK. Could you show all certificates in a chains?
    Code:
    echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 -showcerts
    Code:
    CONNECTED(00000003)
    depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
    verify return:1
    depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
    verify return:1
    depth=0 C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
    verify return:1
    ---
    Certificate chain
     0 s:/C=US/ST=California/L=Santa Clara/O=NVIDIA Corporation/OU=IT Department/CN=*.nvidia.com
       i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
    -----BEGIN CERTIFICATE-----
    MIIH/jCCBuagAwIBAgIQC0p0znQ5Bijka19fc6/boTANBgkqhkiG9w0BAQsFADBN
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
    aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcxMDIyMDAwMDAwWhcN
    MjAxMDI2MTIwMDAwWjCBhDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
    aWExFDASBgNVBAcTC1NhbnRhIENsYXJhMRswGQYDVQQKExJOVklESUEgQ29ycG9y
    YXRpb24xFjAUBgNVBAsTDUlUIERlcGFydG1lbnQxFTATBgNVBAMMDCoubnZpZGlh
    LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANUrdjiqA54VozQO
    v3DMicc30kPT6E9e6nDtZSoNv0+dW0K41F4YrDzMVYs6xyDt/mYQQhAujlj8Oel8
    zHyFBj1AgYowmXovCSzXxgWzA3vIftWxnYJGpsvRVm2bPmWkQRbDn4ZPNoBNGxK9
    tPWf8SxMwtUhRH6LJrHRO4LYl83giiNfmE6Pox9BfF9veNW0fDZTG2LoLFSU96Wg
    w1r8sUMo9HRytDIlH38PrBXtgNEPnbikQh1V9v5hHhCAOvuE7M92PAMc433x7ws3
    8vmWDKvrO+oBNIcIow8JCfRNMGuKUJba1SzJ1mFfn7qq4pJi/iYqeSyvK0R9aJb7
    rHbXM+0CAwEAAaOCBKAwggScMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzh
    xtniMB0GA1UdDgQWBBQx3MIrLi1gWHuo9lCvqHSQLomtfDCB6QYDVR0RBIHhMIHe
    ggwqLm52aWRpYS5jb22CCm52aWRpYS5jb22CF2Rvd25sb2FkLmdmZS5udmlkaWEu
    Y29tghtkb3dubG9hZC1jZG4uZ2ZlLm52aWRpYS5jb22CIWludGVybmF0aW9uYWwu
    ZG93bmxvYWQubnZpZGlhLmNvbYITZG93bmxvYWQucGdyb3VwLmNvbYIZb24tZGVt
    YW5kLmdwdXRlY2hjb25mLmNvbYIeaGRwcm9ncmVzc2l2ZS4zZHZpc2lvbmxpdmUu
    Y29tghlodHRwLmRldmVsb3Blci5udmlkaWEuY29tMA4GA1UdDwEB/wQEAwIFoDAd
    BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp
    aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nMS5jcmwwL6AtoCuG
    KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzEuY3JsMEwGA1Ud
    IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
    Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEF
    BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRw
    Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVy
    Q0EuY3J0MAwGA1UdEwEB/wQCMAAwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2
    AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABX0WH/T8AAAQDAEcw
    RQIhAMUxW8w0+28MV9YI2Vjth/d21/oVH2eHPpUBLAk8U9GuAiAkzo0DBE+LIng8
    733K61/IavlYAAfibPU96EbV2WBWTwB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFc
    wO+UmFXWidDdAAABX0WH/gsAAAQDAEcwRQIgI2uZNMYoypuFQ4DIRiG1AsXYUTiZ
    SwOSqDJjn8LlPZMCIQCKHNW2Oa+mEKcmbegyzrrr3PRrCWBvBuqvtbJWx05WsQB2
    AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABX0WIADgAAAQDAEcw
    RQIgbgpQL2XjdJOJVHniFyaz1Jr4AhRqLKMmP0D7bhtYCWMCIQCLMRqn2xXr7ZKV
    HVFs4rTAUA4YQ4rbHxOvv+89h56rAwB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1Lo
    GpCWZDaOHtGFAAABX0WH/fkAAAQDAEcwRQIgJOU1Zuq+M88Lff5n0x+kdEgMzMch
    aM0G3Q4mguUZeOwCIQDlzyy4Bh0Yd10fFBcoK7ZjTUTfDcbjpSQZYNeRa7D9dDAN
    BgkqhkiG9w0BAQsFAAOCAQEAGA5nS0gHYk6fRYEm5ezpxfKb6rdrFvrwnyEiKSRJ
    N6c3j1GMvBUC+Scafy6FFSk46DwstrPzBuSawOpm6d/8i+r3agXPsRoJ+nhC0Axj
    0Pqcj77XP++TJ56bZopK83FfKn7cSK3gRkS4T1BImYPOxdQeXw3HtTUiqHbztKRM
    vDMUBDhVeEPXr74phUY2drLgkniU2hi2h15WQHafw3SLxaAY157dyXryP1lhIHaB
    8lHUcZzaDDiSVY09Eagwr2zzurCmHug0kf1nlibXVHo02bI+2QhNGP0qeckgI0ks
    cSA6BS53NMDjJIgGlmfWWbRcFyEjXMXt60euseezoScp4A==
    -----END CERTIFICATE-----
     1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
       i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
    -----BEGIN CERTIFICATE-----
    MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
    QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
    MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
    U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
    ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
    nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
    KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
    /ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
    kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
    /RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
    AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
    aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
    Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
    oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
    QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
    d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
    xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
    CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
    5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
    8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
    2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
    c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
    j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
    -----END CERTIFICATE-----
     2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
       i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
    -----BEGIN CERTIFICATE-----
    MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
    QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
    MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
    b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
    9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
    CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
    nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
    43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
    T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
    gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
    BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
    TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
    DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
    hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
    06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
    PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
    YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
    CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
    -----END CERTIFICATE-----
    ---
    Server certificate
    subject=/C=US/ST=California/L=Santa Clara/O=NVIDIA Corporation/OU=IT Department/CN=*.nvidia.com
    issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
    ---
    No client certificate CA names sent
    Peer signing digest: SHA512
    Server Temp Key: ECDH, P-256, 256 bits
    ---
    SSL handshake has read 4853 bytes and written 330 bytes
    Verification: OK
    ---
    New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
    Server public key is 2048 bit
    Secure Renegotiation IS supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    SSL-Session:
        Protocol  : TLSv1.2
        Cipher    : ECDHE-RSA-AES128-GCM-SHA256
        Session-ID: 2CB82DB0ABBB0FE6DE11428E11763FD6B7FDEE1BF2AF7A84BEB9B7A9FF6099F2
        Session-ID-ctx: 
        Master-Key: CA0429A27AD4CAEE08C460FA33858899BCB30867675CCC22757169521A07F4D57469C01914252B7C0AFB404E9D94A076
        PSK identity: None
        PSK identity hint: None
        SRP username: None
        TLS session ticket lifetime hint: 7200 (seconds)
        TLS session ticket:
        0000 - 3a 8c d4 1d d2 d7 be cf-c5 c6 8b 46 21 55 15 6c   :..........F!U.l
        0010 - 9d f0 74 93 e2 7f f1 b0-22 a6 d2 88 04 6c 6b 3c   ..t....."....lk<
        0020 - a1 15 38 c1 e0 8d ac 2d-ff 63 77 37 cd d3 0c bf   ..8....-.cw7....
        0030 - 17 77 64 4c e2 d9 4d 96-44 4d d5 fb b1 7e ff ee   .wdL..M.DM...~..
        0040 - f4 6f 2b c7 b4 e6 05 ef-d3 85 ff 35 ca 41 0c 41   .o+........5.A.A
        0050 - f2 c4 4d e7 f5 6c fe 42-f7 1b 0e 1b 26 b7 36 16   ..M..l.B....&.6.
        0060 - 6f 60 bb dc cf 44 a1 a8-60 53 06 33 fb 55 2c 41   o`...D..`S.3.U,A
        0070 - 78 86 c1 15 35 03 11 58-dc 89 3b af 8b 73 71 2e   x...5..X..;..sq.
        0080 - 2a 76 5d 7b 2f b4 b0 05-18 9f db b2 f1 1a 83 8f   *v]{/...........
        0090 - 18 4e f6 74 71 c1 cf 0a-84 4a 8b e8 cb a2 4b ac   .N.tq....J....K.
        00a0 - fe 3d f7 6c c9 06 6f 26-f6 71 f8 c2 68 d5 f1 c9   .=.l..o&.q..h...
    
        Start Time: 1526196883
        Timeout   : 7200 (sec)
        Verify return code: 0 (ok)
        Extended master secret: yes
    ---
    DONE

  10. #10
    Join Date
    Sep 2012
    Posts
    6,832

    Default Re: Can not add NVIDIA repository

    All certificates look OK. Do you still have the same problem? Otherwise it could be missing root certificate.

    1. Does it work with http instead of https?
    2. Can you access this https URL with any browser? What browser says about security of this URL?
    3. Can you post output of "curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml"
    4. What "ls -l /etc/ssl/certs/3513523f.0" and "openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256" say?

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •