Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 24

Thread: Can not add NVIDIA repository

  1. #11
    Join Date
    Aug 2016
    Location
    Turkey
    Posts
    13

    Default Re: Can not add NVIDIA repository

    Quote Originally Posted by arvidjaar View Post
    All certificates look OK. Do you still have the same problem? Otherwise it could be missing root certificate.

    1. Does it work with http instead of https?
    2. Can you access this https URL with any browser? What browser says about security of this URL?
    3. Can you post output of "curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml"
    4. What "ls -l /etc/ssl/certs/3513523f.0" and "openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256" say?
    1. Yes, it does.
    2. Yes I can acces with Mozilla Firefox. Mozilla Firefox says it is secure.
    3.
    Code:
    curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml
    *   Trying 192.229.220.191...
    * TCP_NODELAY set
    * Connected to download.nvidia.com (192.229.220.191) port 443 (#0)
    * ALPN, offering h2
    * ALPN, offering http/1.1
    * TLSv1.2 (OUT), TLS handshake, Client hello (1):
    * TLSv1.2 (IN), TLS handshake, Server hello (2):
    * TLSv1.2 (IN), TLS handshake, Certificate (11):
    * TLSv1.2 (IN), TLS handshake, Server key exchange (12):
    * TLSv1.2 (IN), TLS handshake, Server finished (14):
    * TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
    * TLSv1.2 (OUT), TLS change cipher, Client hello (1):
    * TLSv1.2 (OUT), TLS handshake, Finished (20):
    * TLSv1.2 (IN), TLS handshake, Finished (20):
    * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
    * ALPN, server accepted to use h2
    * Server certificate:
    *  subject: C=US; ST=California; L=Santa Clara; O=NVIDIA Corporation; OU=IT Department; CN=*.nvidia.com
    *  start date: Oct 22 00:00:00 2017 GMT
    *  expire date: Oct 26 12:00:00 2020 GMT
    *  subjectAltName: host "download.nvidia.com" matched cert's "*.nvidia.com"
    *  issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA
    *  SSL certificate verify ok.
    * Using HTTP2, server supports multi-use
    * Connection state changed (HTTP/2 confirmed)
    * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
    * Using Stream ID: 1 (easy handle 0x5577e67dc5f0)
    > GET /opensuse/leap/42.3/repodata/repomd.xml HTTP/2
    > Host: download.nvidia.com
    > User-Agent: curl/7.59.0
    > Accept: */*
    > 
    * Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
    < HTTP/2 200 
    < accept-ranges: bytes
    < cache-control: max-age=604800
    < content-type: text/xml
    < date: Sun, 13 May 2018 09:30:12 GMT
    < etag: "1041457094"
    < expires: Sun, 20 May 2018 09:30:12 GMT
    < last-modified: Wed, 11 Apr 2018 14:43:14 GMT
    < server: ECAcc (vie/F2F0)
    < vary: Accept-Encoding
    < x-cache: HIT
    < content-length: 1510
    < 
    <?xml version="1.0" encoding="UTF-8"?>
    <repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
     <revision>1522781512</revision>
    <data type="filelists">
      <checksum type="sha256">14c3aa77114d7affdc772e3dc08f261ab32750431857ab167de519c040a789a5</checksum>
      <open-checksum type="sha256">2b377a2fed77b4302c9427eb535e690f4434ffb1196d6dca11a6bbb6ef58e07c</open-checksum>
      <location href="repodata/14c3aa77114d7affdc772e3dc08f261ab32750431857ab167de519c040a789a5-filelists.xml.gz"/>
      <timestamp>1522781807</timestamp>
      <size>6189</size>
      <open-size>80095</open-size>
    </data>
    <data type="other">
      <checksum type="sha256">4b99bf02f546b2faec7a88625011a87a45d87d4b5fb8891eaf96459812978dea</checksum>
      <open-checksum type="sha256">7171927dd3addec1ac48751a307d42302c6ab637d8c9a5222672620cf98707b0</open-checksum>
      <location href="repodata/4b99bf02f546b2faec7a88625011a87a45d87d4b5fb8891eaf96459812978dea-other.xml.gz"/>
      <timestamp>1522781807</timestamp>
      <size>114153</size>
      <open-size>523201</open-size>
    </data>
    <data type="primary">
      <checksum type="sha256">0c0de50a85416cab1404b0ade6cc5e9aea61cd251a763982059d2dae38d30f00</checksum>
      <open-checksum type="sha256">58b417f457e2ed8d3e5b94aa6fd39cdc5113be071e981e2417a12d9f02e632f0</open-checksum>
      <location href="repodata/0c0de50a85416cab1404b0ade6cc5e9aea61cd251a763982059d2dae38d30f00-primary.xml.gz"/>
      <timestamp>1522781807</timestamp>
      <size>21355</size>
      <open-size>192657</open-size>
    </data>
    </repomd>
    * Connection #0 to host download.nvidia.com left intact
    4.
    Code:
    ls -l /etc/ssl/certs/3513523f.0
    lrwxrwxrwx 1 root root 27 May 13 12:25 /etc/ssl/certs/3513523f.0 -> DigiCert_Global_Root_CA.pem
    Code:
    openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256
    SHA256 Fingerprint=43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61

  2. #12

    Default Re: Can not add NVIDIA repository

    apologies if this is in the wrong place... I'm having the same problem on Leap 15.3. Looks like I'll need two posts to respond to all the same questions.

    Code:
    # zypper --gpg-auto-import-keys ref
    Retrieving repository 'NVIDIA' metadata .........................................[error]
    Repository 'NVIDIA' is invalid.
    [NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL
    History:
     - File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz' not found on medium 'https://download.nvidia.com/opensuse/leap/15.3'
     - Can't provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz
    
    Please check if the URIs defined for this repository are pointing to a valid repository.
    Skipping repository 'NVIDIA' because of the above error.
    Repository 'openSUSE-Leap-15.3-1' is up to date.                                        
    Repository 'Update repository of openSUSE Backports' is up to date.                     
    Repository 'Non-OSS Repository' is up to date.                                          
    Repository 'Main Repository' is up to date.                                             
    Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.
    Repository 'Main Update Repository' is up to date.                                      
    Repository 'Update Repository (Non-Oss)' is up to date.             
    
    # echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 | openssl x509 -inform pem -noout -text
    depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
    verify return:1
    depth=1 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
    verify return:1
    depth=0 C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
    verify return:1
    DONE
    Certificate:
        Data:
            Version: 3 (0x2)
            Serial Number:
                0c:f9:46:d4:a5:67:fc:6f:c8:cf:36:a1:4d:90:31:60
            Signature Algorithm: sha256WithRSAEncryption
            Issuer: C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
            Validity
                Not Before: Sep  7 00:00:00 2021 GMT
                Not After : Oct  8 23:59:59 2022 GMT
            Subject: C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
            Subject Public Key Info:
                Public Key Algorithm: rsaEncryption
                    RSA Public-Key: (2048 bit)
                    Modulus:
                        00:c3:24:be:2e:b4:75:88:88:f5:37:eb:b8:0f:d3:
                        61:29:5d:4d:87:88:71:af:a9:2f:ba:98:2b:4a:be:
                        43:07:62:ee:4f:05:86:f8:e7:54:f9:57:cd:4c:de:
                        d4:07:f2:f1:02:f1:43:76:a0:0d:88:19:22:4c:11:
                        3b:dd:90:0e:12:01:66:e4:48:e8:95:c1:ea:15:9a:
                        55:ef:da:d1:d3:01:73:8b:d9:c6:6c:f8:f1:d9:2e:
                        e1:1a:40:c6:7d:66:1b:20:d0:e2:10:b4:5b:56:ab:
                        f8:9f:9d:b7:6b:69:f5:df:3a:6c:b4:ed:32:29:07:
                        96:01:b7:21:30:91:d1:8f:c5:9a:37:33:9b:ec:b5:
                        ec:14:a8:bb:4d:16:a1:80:79:9c:53:df:be:d6:68:
                        66:a2:4f:a8:69:22:5c:b2:52:e8:27:27:74:08:6f:
                        1b:16:03:ef:77:6e:6c:fd:07:2b:3e:06:ac:89:be:
                        48:1d:30:f2:ca:53:bf:79:f0:41:5e:76:94:4e:58:
                        74:b3:35:17:75:26:28:56:67:36:84:55:0f:9a:83:
                        de:0e:b5:07:da:1d:ae:5c:fb:2d:c4:6e:c9:de:9a:
                        77:40:b5:1c:80:03:da:c3:f1:25:80:79:16:8e:35:
                        58:6e:32:6d:e1:de:86:21:a9:a4:aa:f8:91:a7:6c:
                        f1:69
                    Exponent: 65537 (0x10001)
            X509v3 extensions:
                X509v3 Authority Key Identifier: 
                    keyid:B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
    
                X509v3 Subject Key Identifier: 
                    3F:05:46:5B:68:41:F1:6C:6A:87:E9:7B:45:82:EF:BB:EE:B4:1C:0D
                X509v3 Subject Alternative Name: 
                    DNS:us.vrzn.download.nvidia.com, DNS:*.nvidia.com, DNS:nvidia.com, DNS:download.gfe.nvidia.com, DNS:download-cdn.gfe.nvidia.com, DNS:international.download.nvidia.com, DNS:download.pgroup.com, DNS:on-demand.gputechconf.com, DNS:hdprogressive.3dvisionlive.com, DNS:http.developer.nvidia.com, DNS:downloadstage-cdn.gfe.nvidia.com
                X509v3 Key Usage: critical
                    Digital Signature, Key Encipherment
                X509v3 Extended Key Usage: 
                    TLS Web Server Authentication, TLS Web Client Authentication
                X509v3 CRL Distribution Points: 
    
                    Full Name:
                      URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
    
                    Full Name:
                      URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
    
                X509v3 Certificate Policies: 
                    Policy: 2.23.140.1.2.2
                      CPS: http://www.digicert.com/CPS
    
                Authority Information Access: 
                    OCSP - URI:http://ocsp.digicert.com
                    CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
    
                X509v3 Basic Constraints: critical
                    CA:FALSE
                CT Precertificate SCTs: 
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
                                    BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
                        Timestamp : Sep  7 18:38:19.025 2021 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:45:02:20:7C:43:AB:84:18:EB:53:2C:FA:0A:5C:05:
                                    94:35:56:F7:DF:4F:45:58:26:82:A9:CE:AC:76:7E:55:
                                    48:48:5E:BF:02:21:00:C7:4E:B5:B9:53:DF:67:17:6B:
                                    03:B3:45:DD:02:EB:EB:FB:0E:3A:A5:B9:27:60:8E:FB:
                                    1F:94:FA:0A:8B:98:71
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : 51:A3:B0:F5:FD:01:79:9C:56:6D:B8:37:78:8F:0C:A4:
                                    7A:CC:1B:27:CB:F7:9E:88:42:9A:0D:FE:D4:8B:05:E5
                        Timestamp : Sep  7 18:38:19.021 2021 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:46:02:21:00:C3:60:57:85:5F:6D:89:4A:18:17:55:
                                    37:B0:24:35:D6:12:D6:BF:2B:C7:08:6B:78:90:8A:97:
                                    59:55:78:DA:4D:02:21:00:80:5E:37:58:78:47:FF:D0:
                                    D2:86:9D:23:DB:EC:DA:91:CC:14:3A:11:34:4D:19:F4:
                                    7F:0D:D8:C2:20:1D:14:EF
                    Signed Certificate Timestamp:
                        Version   : v1 (0x0)
                        Log ID    : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
                                    4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
                        Timestamp : Sep  7 18:38:19.008 2021 GMT
                        Extensions: none
                        Signature : ecdsa-with-SHA256
                                    30:46:02:21:00:A9:17:94:7E:2B:DA:32:31:A0:AB:B8:
                                    2A:D1:D1:7E:47:14:42:0B:72:EB:1C:C9:48:3B:34:83:
                                    3C:31:CF:57:6B:02:21:00:DB:1F:47:D9:86:87:45:D9:
                                    8B:01:1F:7F:92:8D:9B:29:E4:FA:91:F9:53:EC:40:BC:
                                    0B:4B:8C:6C:C5:E2:F3:3D
        Signature Algorithm: sha256WithRSAEncryption
             35:70:1c:84:75:a4:ab:e1:d7:fa:c5:4b:32:55:52:02:8e:6b:
             ac:4b:6f:97:01:b0:df:e4:ae:e9:16:be:50:d1:0d:d4:43:02:
             f2:47:10:d6:b3:29:e8:4b:80:ec:8f:ab:9d:35:b8:82:cd:7c:
             d3:12:69:22:54:ca:56:60:c4:9a:c2:9e:ae:8d:d0:1a:a1:4d:
             5f:1f:0e:d7:0b:cd:15:26:cc:44:77:60:77:c2:7f:b9:d2:fb:
             13:a9:56:b2:e4:0d:a3:c1:94:5b:45:ca:b2:bd:a1:36:d0:26:
             d2:20:18:3f:de:60:2a:68:2d:e3:68:49:0a:66:e5:d0:41:02:
             c3:39:e8:04:42:5c:9f:84:66:c4:11:23:d8:c7:76:b0:7b:54:
             10:b8:47:10:28:ae:76:25:c1:9c:c0:38:4a:33:30:0c:4b:de:
             7b:5e:26:ca:9d:97:23:e7:f3:e4:b6:6d:96:a1:be:c2:c5:ff:
             00:8d:33:90:44:88:39:0f:c0:b8:8d:ba:7c:9e:af:06:ea:f7:
             fd:43:af:67:24:b6:7f:8d:ed:d8:0f:18:85:89:c7:a0:8c:38:
             89:2b:75:54:d2:b4:f1:d4:fc:f3:2e:74:87:cc:b0:1a:9c:da:
             02:81:fd:f0:47:86:6a:49:81:6c:8a:f3:62:87:e6:3d:c3:cf:
             54:81:1a:c9
    localhost:/home/etoid # 
    
    
    # zypper lr -d
    #  | Alias                       | Name                                                                                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                     | Service
    ---+-----------------------------+---------------------------------------------------------------------------------------------+---------+-----------+---------+----------+--------+-------------------------------------------------------------------------+--------
     1 | NVIDIA                      | NVIDIA                                                                                      | Yes     | ( p) Yes  | Yes     |   99     | NONE   | https://download.nvidia.com/opensuse/leap/15.3                          | 
     2 | openSUSE-Leap-15.3-1        | openSUSE-Leap-15.3-1                                                                        | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/oss            | 
     3 | repo-backports-debug-update | Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/update/leap/15.3/backports_debug/          | 
     4 | repo-backports-update       | Update repository of openSUSE Backports                                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/backports/                | 
     5 | repo-debug                  | Debug Repository                                                                            | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/oss/     | 
     6 | repo-debug-non-oss          | Debug Repository (Non-OSS)                                                                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/non-oss/ | 
     7 | repo-debug-update           | Update Repository (Debug)                                                                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/oss/                | 
     8 | repo-debug-update-non-oss   | Update Repository (Debug, Non-OSS)                                                          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/non-oss/            | 
     9 | repo-non-oss                | Non-OSS Repository                                                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/non-oss/       | 
    10 | repo-oss                    | Main Repository                                                                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/oss/           | 
    11 | repo-sle-debug-update       | Update repository with debuginfo for updates from SUSE Linux Enterprise 15                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/sle/                | 
    12 | repo-sle-update             | Update repository with updates from SUSE Linux Enterprise 15                                | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/sle/                      | 
    13 | repo-source                 | Source Repository                                                                           | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.3/repo/oss/    | 
    14 | repo-update                 | Main Update Repository                                                                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/oss/                      | 
    15 | repo-update-non-oss         | Update Repository (Non-Oss)                                                                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/non-oss/             
    
    
    # uname -a
    Linux localhost 5.3.18-59.24-default #1 SMP Mon Sep 13 15:06:42 UTC 2021 (2f872ea) x86_64 x86_64 x86_64 GNU/Linux
    
    # /sbin/lspci -nnk | grep -EiA3 'vga|3d|display'
    02:00.0 VGA compatible controller [0300]: NVIDIA Corporation GK110B [GeForce GTX 780 Ti] [10de:100a] (rev a1)
            Subsystem: ASUSTeK Computer Inc. Device [1043:849e]
            Kernel driver in use: nouveau
            Kernel modules: nouveau
    Last edited by etoid; 26-Sep-2021 at 00:35. Reason: adding code brackets for ease of reading

  3. #13

    Default Re: Can not add NVIDIA repository

    Code:
    # echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 -showcerts
    CONNECTED(00000003)
    depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
    verify return:1
    depth=1 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
    verify return:1
    depth=0 C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
    verify return:1
    ---
    Certificate chain
    0 s:C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
    i:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
    -----BEGIN CERTIFICATE-----
    MIIH3DCCBsSgAwIBAgIQDPlG1KVn/G/IzzahTZAxYDANBgkqhkiG9w0BAQsFADBP
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
    aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTA5MDcwMDAwMDBa
    Fw0yMjEwMDgyMzU5NTlaMHsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y
    bmlhMRQwEgYDVQQHEwtTYW50YSBDbGFyYTEbMBkGA1UEChMSTnZpZGlhIENvcnBv
    cmF0aW9uMSQwIgYDVQQDExt1cy52cnpuLmRvd25sb2FkLm52aWRpYS5jb20wggEi
    MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJL4utHWIiPU367gP02EpXU2H
    iHGvqS+6mCtKvkMHYu5PBYb451T5V81M3tQH8vEC8UN2oA2IGSJMETvdkA4SAWbk
    SOiVweoVmlXv2tHTAXOL2cZs+PHZLuEaQMZ9Zhsg0OIQtFtWq/ifnbdrafXfOmy0
    7TIpB5YBtyEwkdGPxZo3M5vstewUqLtNFqGAeZxT377WaGaiT6hpIlyyUugnJ3QI
    bxsWA+93bmz9Bys+BqyJvkgdMPLKU7958EFedpROWHSzNRd1JihWZzaEVQ+ag94O
    tQfaHa5c+y3EbsnemndAtRyAA9rD8SWAeRaONVhuMm3h3oYhqaSq+JGnbPFpAgMB
    AAGjggSGMIIEgjAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNV
    HQ4EFgQUPwVGW2hB8Wxqh+l7RYLvu+60HA0wggEqBgNVHREEggEhMIIBHYIbdXMu
    dnJ6bi5kb3dubG9hZC5udmlkaWEuY29tggwqLm52aWRpYS5jb22CCm52aWRpYS5j
    b22CF2Rvd25sb2FkLmdmZS5udmlkaWEuY29tghtkb3dubG9hZC1jZG4uZ2ZlLm52
    aWRpYS5jb22CIWludGVybmF0aW9uYWwuZG93bmxvYWQubnZpZGlhLmNvbYITZG93
    bmxvYWQucGdyb3VwLmNvbYIZb24tZGVtYW5kLmdwdXRlY2hjb25mLmNvbYIeaGRw
    cm9ncmVzc2l2ZS4zZHZpc2lvbmxpdmUuY29tghlodHRwLmRldmVsb3Blci5udmlk
    aWEuY29tgiBkb3dubG9hZHN0YWdlLWNkbi5nZmUubnZpZGlhLmNvbTAOBgNVHQ8B
    Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8E
    gYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRM
    U1JTQVNIQTI1NjIwMjBDQTEtMy5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2lj
    ZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMy5jcmwwPgYDVR0g
    BDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
    dC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29j
    c3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdp
    Y2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1Ud
    EwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2ACl5vvCeOTkh8FZz
    n2Old+W+V32cYAr4+U1dJlwlXceEAAABe8GNxZEAAAQDAEcwRQIgfEOrhBjrUyz6
    ClwFlDVW999PRVgmgqnOrHZ+VUhIXr8CIQDHTrW5U99nF2sDs0XdAuvr+w46pbkn
    YI77H5T6CouYcQB3AFGjsPX9AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAAB
    e8GNxY0AAAQDAEgwRgIhAMNgV4VfbYlKGBdVN7AkNdYS1r8rxwhreJCKl1lVeNpN
    AiEAgF43WHhH/9DShp0j2+zakcwUOhE0TRn0fw3YwiAdFO8AdwBByMqx3yJGShDG
    oToJQodeTjGLGwPr60vHaPCQYpYG9gAAAXvBjcWAAAAEAwBIMEYCIQCpF5R+K9oy
    MaCruCrR0X5HFEILcuscyUg7NIM8Mc9XawIhANsfR9mGh0XZiwEff5KNmynk+pH5
    U+xAvAtLjGzF4vM9MA0GCSqGSIb3DQEBCwUAA4IBAQA1cByEdaSr4df6xUsyVVIC
    jmusS2+XAbDf5K7pFr5Q0Q3UQwLyRxDWsynoS4Dsj6udNbiCzXzTEmkiVMpWYMSa
    wp6ujdAaoU1fHw7XC80VJsxEd2B3wn+50vsTqVay5A2jwZRbRcqyvaE20CbSIBg/
    3mAqaC3jaEkKZuXQQQLDOegEQlyfhGbEESPYx3awe1QQuEcQKK52JcGcwDhKMzAM
    S957XibKnZcj5/Pktm2Wob7Cxf8AjTOQRIg5D8C4jbp8nq8G6vf9Q69nJLZ/je3Y
    DxiFicegjDiJK3VU0rTx1PzzLnSHzLAanNoCgf3wR4ZqSYFsivNih+Y9w89UgRrJ
    -----END CERTIFICATE-----
    1 s:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
    i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
    -----BEGIN CERTIFICATE-----
    MIIEvjCCA6agAwIBAgIQBtjZBNVYQ0b2ii+nVCJ+xDANBgkqhkiG9w0BAQsFADBh
    MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
    d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
    QTAeFw0yMTA0MTQwMDAwMDBaFw0zMTA0MTMyMzU5NTlaME8xCzAJBgNVBAYTAlVT
    MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxKTAnBgNVBAMTIERpZ2lDZXJ0IFRMUyBS
    U0EgU0hBMjU2IDIwMjAgQ0ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
    AQEAwUuzZUdwvN1PWNvsnO3DZuUfMRNUrUpmRh8sCuxkB+Uu3Ny5CiDt3+PE0J6a
    qXodgojlEVbbHp9YwlHnLDQNLtKS4VbL8Xlfs7uHyiUDe5pSQWYQYE9XE0nw6Ddn
    g9/n00tnTCJRpt8OmRDtV1F0JuJ9x8piLhMbfyOIJVNvwTRYAIuE//i+p1hJInuW
    raKImxW8oHzf6VGo1bDtN+I2tIJLYrVJmuzHZ9bjPvXj1hJeRPG/cUJ9WIQDgLGB
    Afr5yjK7tI4nhyfFK3TUqNaX3sNk+crOU6JWvHgXjkkDKa77SU+kFbnO8lwZV21r
    eacroicgE7XQPUDTITAHk+qZ9QIDAQABo4IBgjCCAX4wEgYDVR0TAQH/BAgwBgEB
    /wIBADAdBgNVHQ4EFgQUt2ui6qiqhIx56rTaD5iyxZV2ufQwHwYDVR0jBBgwFoAU
    A95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQG
    CCsGAQUFBwMBBggrBgEFBQcDAjB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGG
    GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBABggrBgEFBQcwAoY0aHR0cDovL2Nh
    Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNydDBCBgNV
    HR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRH
    bG9iYWxSb290Q0EuY3JsMD0GA1UdIAQ2MDQwCwYJYIZIAYb9bAIBMAcGBWeBDAEB
    MAgGBmeBDAECATAIBgZngQwBAgIwCAYGZ4EMAQIDMA0GCSqGSIb3DQEBCwUAA4IB
    AQCAMs5eC91uWg0Kr+HWhMvAjvqFcO3aXbMM9yt1QP6FCvrzMXi3cEsaiVi6gL3z
    ax3pfs8LulicWdSQ0/1s/dCYbbdxglvPbQtaCdB73sRD2Cqk3p5BJl+7j5nL3a7h
    qG+fh/50tx8bIKuxT8b1Z11dmzzp/2n3YWzW2fP9NsarA4h20ksudYbj/NhVfSbC
    EXffPgK2fPOre3qGNm+499iTcc+G33Mw+nur7SpZyEKEOxEXGlLzyQ4UfaJbcme6
    ce1XR2bFuAJKZTRei9AqPCCcUZlM51Ke92sRKw2Sfh3oius2FkOH6ipjv3U/697E
    A7sKPPcw7+uvTPyLNhBzPvOk
    -----END CERTIFICATE-----
    ---
    Server certificate
    subject=C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
    
    issuer=C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
    
    ---
    No client certificate CA names sent
    Peer signing digest: SHA256
    Peer signature type: RSA-PSS
    Server Temp Key: ECDH, P-256, 256 bits
    ---
    SSL handshake has read 3921 bytes and written 755 bytes
    Verification: OK
    ---
    New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
    Server public key is 2048 bit
    Secure Renegotiation IS NOT supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    Early data was not sent
    Verify return code: 0 (ok)
    ---
    DONE
    
    http & https both seem to be working? 
    
    
    # curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml
    *   Trying 192.229.210.202:443...
    * TCP_NODELAY set
    * Connected to download.nvidia.com (192.229.210.202) port 443 (#0)
    * ALPN, offering h2
    * ALPN, offering http/1.1
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):
    * TLSv1.3 (IN), TLS handshake, Server hello (2):
    * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
    * TLSv1.3 (OUT), TLS handshake, Client hello (1):
    * TLSv1.3 (IN), TLS handshake, Server hello (2):
    * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
    * TLSv1.3 (IN), TLS handshake, Certificate (11):
    * TLSv1.3 (IN), TLS handshake, CERT verify (15):
    * TLSv1.3 (IN), TLS handshake, Finished (20):
    * TLSv1.3 (OUT), TLS handshake, Finished (20):
    * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
    * ALPN, server accepted to use h2
    * Server certificate:
    *  subject: C=US; ST=California; L=Santa Clara; O=Nvidia Corporation; CN=us.vrzn.download.nvidia.com
    *  start date: Sep  7 00:00:00 2021 GMT
    *  expire date: Oct  8 23:59:59 2022 GMT
    *  subjectAltName: host "download.nvidia.com" matched cert's "*.nvidia.com"
    *  issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1
    *  SSL certificate verify ok.
    * Using HTTP2, server supports multi-use
    * Connection state changed (HTTP/2 confirmed)
    * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
    * Using Stream ID: 1 (easy handle 0x5638711ed820)
    > GET /opensuse/leap/42.3/repodata/repomd.xml HTTP/2
    > Host: download.nvidia.com
    > User-Agent: curl/7.66.0
    > Accept: */*
    > 
    * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
    * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
    * old SSL session ID is stale, removing
    * Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
    < HTTP/2 200 
    < accept-ranges: bytes
    < age: 378366
    < cache-control: max-age=604800
    < content-type: text/xml
    < date: Sun, 26 Sep 2021 07:23:09 GMT
    < etag: "1691999867"
    < expires: Sun, 03 Oct 2021 07:23:09 GMT
    < last-modified: Mon, 19 Aug 2019 16:18:02 GMT
    < server: ECAcc (mic/9AB3)
    < vary: Accept-Encoding
    < x-cache: HIT
    < x-vdms-version: 100.16
    < content-length: 1954
    < 
    <?xml version="1.0" encoding="UTF-8"?>
    <repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
      <revision>1566228060</revision>
      <data type="filelists">
        <location href="repodata/68edd4d4431d5518d29555c5e6fffd4423294ae9005e17f03a268e42a3bbb16e-filelists.xml.gz"/>
        <checksum type="sha256">68edd4d4431d5518d29555c5e6fffd4423294ae9005e17f03a268e42a3bbb16e</checksum>
        <timestamp>1566228064</timestamp>
        <size>8776</size>
        <open-size>127931</open-size>
        <open-checksum type="sha256">f6c0a1501ab27f921b9f65c6c83bc55afe2686a8fd65c8982d0c24e48038f6ba</open-checksum>
      </data>
      <data type="other">
        <location href="repodata/9997f1bd9e827410f61f549a39409913b51999ea8560f3056c36ecf12b83f458-other.xml.gz"/>
        <checksum type="sha256">9997f1bd9e827410f61f549a39409913b51999ea8560f3056c36ecf12b83f458</checksum>
        <timestamp>1566228064</timestamp>
        <size>158250</size>
        <open-size>610764</open-size>
        <open-checksum type="sha256">48be0ed8ac620b75eac21ac3708c57b2ea6320bbb71b71b43db8816177fa482c</open-checksum>
      </data>
      <data type="primary">
        <location href="repodata/f00be618ab3a0f560515cb0b5f5fbc9bb07f38e913a13d3aebc0b67cddcc800b-primary.xml.gz"/>
        <checksum type="sha256">f00be618ab3a0f560515cb0b5f5fbc9bb07f38e913a13d3aebc0b67cddcc800b</checksum>
        <timestamp>1566228064</timestamp>
        <size>29915</size>
        <open-size>260482</open-size>
        <open-checksum type="sha256">d91942556051cb5c9aa8d4d9f86cc937f8200e1be0178b42d766584a149a9f29</open-checksum>
      </data>
      <data type="susedata">
        <location href="repodata/susedata.xml.gz"/>
        <checksum type="sha256">01825787500406bbca4f3910d59bba8ec3e3e07df5303eee41c9f2c9a41a0e2f</checksum>
        <timestamp>1566228065</timestamp>
        <size>4628</size>
        <open-size>95723</open-size>
        <open-checksum type="sha256">fb0eac7e5b542b096b1c217b33a0fe847b22a3397299018c51e0d6998d4190c7</open-checksum>
      </data>
    </repomd>
    * Connection #0 to host download.nvidia.com left intact
    
    # ls -l /etc/ssl/certs/3513523f.0
    lrwxrwxrwx 1 root root 27 Sep 25 12:10 /etc/ssl/certs/3513523f.0 -> DigiCert_Global_Root_CA.pem
    
    # openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256
    SHA256 Fingerprint=43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61
    Last edited by etoid; 26-Sep-2021 at 00:37. Reason: adding code brackets for ease of reading

  4. #14

    Default Re: Can not add NVIDIA repository

    I see what the problem is but I'm not sure how to fix it.

    If I go to https://download.nvidia.com/opensuse/leap/15.3/repodata/

    Index of /opensuse/leap/15.3/repodata

    ..
    34bded2538199fa2710841ff824d6b9fb660396d3f179950cdb389b54283fc97-filelists.xml.gz 12KB 2021-09-21 22:48
    6165bd9f8d5a4aa9f0625c2ae413d3a9f78cab194723de6f00bafc38a23059a4-primary.xml.gz 12KB 2021-09-21 22:48
    b94b730ee370b5ecfdb0faf8a2764f6f587b58df35e040d1b4e0433dc6091e8d-other.xml.gz 144KB 2021-09-21 22:48
    repomd.xml 4.0KB 2021-09-21 22:48
    repomd.xml.asc 4.0KB 2021-09-21 22:48
    repomd.xml.key 4.0KB 2021-09-21 22:48
    susedata.xml.gz 4.0KB 2021-09-21 22:48

    None of these files match what the refresh command is looking for.

    ~> sudo zypper refresh
    Retrieving repository 'NVIDIA' metadata .........................................[error]
    Repository 'NVIDIA' is invalid.
    [NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL
    History:
    - File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz' not found on medium 'https://download.nvidia.com/opensuse/leap/15.3'
    - Can't provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz

    Please check if the URIs defined for this repository are pointing to a valid repository.
    Skipping repository 'NVIDIA' because of the above error.

  5. #15
    Join Date
    Mar 2011
    Location
    Sauerland
    Posts
    6,491

    Default AW: Can not add NVIDIA repository

    What about deleting the repo and adding it?

    also see here:
    Code:
    /var/cache/zypp/raw/

  6. #16

    Default Re: Can not add NVIDIA repository

    I did try deleting and adding. That's how I figured out the filenames were wrong.

    That directory has another directory for nvidia but it's empty.

    Code:
    @localhost:/var/cache/zypp/raw> ls
    NVIDIA                repo-backports-update  repo-oss         repo-update
    openSUSE-Leap-15.3-1  repo-non-oss           repo-sle-update  repo-update-non-oss
    @localhost:/var/cache/zypp/raw> cd NVIDIA
    @localhost:/var/cache/zypp/raw/NVIDIA> ls
    @localhost:/var/cache/zypp/raw/NVIDIA>
    Code:
    :~> sudo zypper removerepo NVIDIA
    Removing repository 'NVIDIA' .....................................................[done]
    Repository 'NVIDIA' has been removed.
    etoid@localhost:~> sudo zypper addrepo --refresh 'https://download.nvidia.com/opensuse/leap/15.3' NVIDIA
    Adding repository 'NVIDIA' .......................................................[done]
    Repository 'NVIDIA' successfully added
    
    URI         : https://download.nvidia.com/opensuse/leap/15.3
    Enabled     : Yes
    GPG Check   : Yes
    Autorefresh : Yes
    Priority    : 99 (default priority)
    
    Repository priorities are without effect. All enabled repositories share the same priority.
    etoid@localhost:~> sudo zypper refresh
    Retrieving repository 'NVIDIA' metadata .........................................[error]
    Repository 'NVIDIA' is invalid.
    [NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL                                                                               
    History:                                                                                
     - File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz' not found on medium 'https://download.nvidia.com/opensuse/leap/15.3'       
     - Can't provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz                                                                     
    
    Please check if the URIs defined for this repository are pointing to a valid repository.
    Skipping repository 'NVIDIA' because of the above error.
    Repository 'openSUSE-Leap-15.3-1' is up to date.                                        
    Repository 'Update repository of openSUSE Backports' is up to date.                     
    Repository 'Non-OSS Repository' is up to date.                                          
    Repository 'Main Repository' is up to date.                                             
    Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.
    Repository 'Main Update Repository' is up to date.                                      
    Repository 'Update Repository (Non-Oss)' is up to date.                                 
    Some of the repositories have not been refreshed because of an error.
    e@localhost:~>

  7. #17
    Join Date
    Mar 2011
    Location
    Sauerland
    Posts
    6,491

    Default AW: Can not add NVIDIA repository

    Is the directoty in /var/cache/zypp/raw also removed when you remove the Repos?

    sudo zypper addrepo --refresh 'https://download.nvidia.com/opensuse/leap/15.3' NVIDIA
    Maybe name it not as the old one.......

    I do not know, if the download.nvidia.com is a redirector.......
    Last edited by Sauerland; 26-Sep-2021 at 07:20.

  8. #18

    Default Re: AW: Can not add NVIDIA repository

    Quote Originally Posted by Sauerland View Post
    Is the directoty in /var/cache/zypp/raw also removed when you remove the Repos?


    Maybe name it not as the old one.......

    I do not know, if the download.nvidia.com is a redirector.......
    No it wasn't.

    I got fed up and tried to go back to Leap 15.2 but I'm having the same problem so, back to 15.3 it is... I'll let you know how it goes. I've gotten a lot more reading in this time.

  9. #19

    Default Re: Can not add NVIDIA repository

    i think you are using repositorys, that are not for your leap- version. always make sure, that you do not use repos like 42.x in leap 15.x (should be ok there, but it was not always)

    do you have graphical system and can run yast in graphic mode? it can be, that your network is not up, if you are only on the console right now...
    if so, this descriptions works for me:
    https://opensuse.github.io/openSUSE-...l_proprietary/
    from scratch, which should have the right repositories already.

    Instead of selectinge the nvidia... in software, just do install recommended packages. if that does not install the nvidia, your graphics are not supportet by nvidia on the leap version any more. use nouveau than instead if possible.

    you can check out, which driver you need for your graphic here:
    https://www.nvidia.com/en-us/drivers/unix/

  10. #20
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    31,862
    Blog Entries
    15

    Default Re: Can not add NVIDIA repository

    Hi
    The OP's 780Ti is supported in Leap 15.3 with the G04 series (390.144).
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

Page 2 of 3 FirstFirst 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •