Can not add NVIDIA repository

I want install NVIDIA driver like there but there is error like this:

linux-xw9x:/home/atesozgur # zypper inr -r NVIDIA
Retrieving repository 'NVIDIA' metadata ------------------------------------------------
'https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml' için indirme(curl) 
Hata kodu: Curl error 60
Hata raporu: SSL certificate problem: self signed certificate in certificate chain

Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): r
Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): a
Retrieving repository 'NVIDIA' metadata ................................................
Repository 'NVIDIA' is invalid.
[NVIDIA|https://download.nvidia.com/opensuse/leap/42.3] Valid metadata not found at spec
Please check if the URIs defined for this repository are pointing to a valid repository.
Warning: Üstteki hatadan dolayı 'NVIDIA' deposu atlanıyor.
Some of the repositories have not been refreshed because of an error.
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Nothing to do.

Before running that command, did you refresh your repos?
You should have been prompted to accept the repo’s GPG key then, to avoid the cURL error you’re getting.

Else, run the following which auto-accepts the GPG key.

zypper --gpg-auto-import-keys ref

Then, you should be able to run your command.

TSU

Yes, I did.
When I enter

zypper --gpg-auto-import-keys ref

I get:

zypper --gpg-auto-import-keys ref
Retrieving repository 'NVIDIA' metadata ---------------------------------------------\]
'https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml' için indirme(curl) hatası:
Hata kodu: Curl error 60
Hata raporu: SSL certificate problem: self signed certificate in certificate chain

Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): r
Durdurma,Yeniden denemek, Yok saymak? [a/r/i/...? shows all options] (a): a
Retrieving repository 'NVIDIA' metadata .........................................[error]
Repository 'NVIDIA' is invalid.
[NVIDIA|https://download.nvidia.com/opensuse/leap/42.3] Valid metadata not found at specified URL
Please check if the URIs defined for this repository are pointing to a valid repository.
Üstteki hatadan dolayı 'NVIDIA' deposu atlanıyor.
Retrieving repository 'Packman Repository' metadata ..............................[done]
'Packman Repository' depo önbelleği oluşturuluyor ................................[done]
Repository 'openSUSE-Tumbleweed-Non-Oss' is up to date.                                 
Repository 'openSUSE-Tumbleweed-Oss' is up to date.                                     
Repository 'openSUSE-Tumbleweed-Update' is up to date.                                  
Some of the repositories have not been refreshed because of an error.
  1. Please always run commands you intend to post here in English locale so that others also understand their output.
  2. The simplest workaround is to use HTTP instead of HTTPS.
  3. If you want to debug what happens, post output of
echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 | openssl x509 -inform pem -noout -text

Please, copy and paste full command invocation and its output including final shell prompt.

Thank for your comment.

depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify return:1
depth=0 C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
verify return:1
DONE
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4a:74:ce:74:39:06:28:e4:6b:5f:5f:73:af:db:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
        Validity
            Not Before: Oct 22 00:00:00 2017 GMT
            Not After : Oct 26 12:00:00 2020 GMT
        Subject: C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:76:38:aa:03:9e:15:a3:34:0e:bf:70:cc:
                    89:c7:37:d2:43:d3:e8:4f:5e:ea:70:ed:65:2a:0d:
                    bf:4f:9d:5b:42:b8:d4:5e:18:ac:3c:cc:55:8b:3a:
                    c7:20:ed:fe:66:10:42:10:2e:8e:58:fc:39:e9:7c:
                    cc:7c:85:06:3d:40:81:8a:30:99:7a:2f:09:2c:d7:
                    c6:05:b3:03:7b:c8:7e:d5:b1:9d:82:46:a6:cb:d1:
                    56:6d:9b:3e:65:a4:41:16:c3:9f:86:4f:36:80:4d:
                    1b:12:bd:b4:f5:9f:f1:2c:4c:c2:d5:21:44:7e:8b:
                    26:b1:d1:3b:82:d8:97:cd:e0:8a:23:5f:98:4e:8f:
                    a3:1f:41:7c:5f:6f:78:d5:b4:7c:36:53:1b:62:e8:
                    2c:54:94:f7:a5:a0:c3:5a:fc:b1:43:28:f4:74:72:
                    b4:32:25:1f:7f:0f:ac:15:ed:80:d1:0f:9d:b8:a4:
                    42:1d:55:f6:fe:61:1e:10:80:3a:fb:84:ec:cf:76:
                    3c:03:1c:e3:7d:f1:ef:0b:37:f2:f9:96:0c:ab:eb:
                    3b:ea:01:34:87:08:a3:0f:09:09:f4:4d:30:6b:8a:
                    50:96:da:d5:2c:c9:d6:61:5f:9f:ba:aa:e2:92:62:
                    fe:26:2a:79:2c:af:2b:44:7d:68:96:fb:ac:76:d7:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2

            X509v3 Subject Key Identifier: 
                31:DC:C2:2B:2E:2D:60:58:7B:A8:F6:50:AF:A8:74:90:2E:89:AD:7C
            X509v3 Subject Alternative Name: 
                DNS:*.nvidia.com, DNS:nvidia.com, DNS:download.gfe.nvidia.com, DNS:download-cdn.gfe.nvidia.com, DNS:international.download.nvidia.com, DNS:download.pgroup.com, DNS:on-demand.gputechconf.com, DNS:hdprogressive.3dvisionlive.com, DNS:http.developer.nvidia.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/ssca-sha2-g1.crl

                Full Name:
                  URI:http://crl4.digicert.com/ssca-sha2-g1.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.2.2

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A4:B9:09:90:B4:18:58:14:87:BB:13:A2:CC:67:70:0A:
                                3C:35:98:04:F9:1B:DF:B8:E3:77:CD:0E:C8:0D:DC:10
                    Timestamp : Oct 22 19:21:00.991 2017 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C5:31:5B:CC:34:FB:6F:0C:57:D6:08:
                                D9:58:ED:87:F7:76:D7:FA:15:1F:67:87:3E:95:01:2C:
                                09:3C:53:D1:AE:02:20:24:CE:8D:03:04:4F:8B:22:78:
                                3C:EF:7D:CA:EB:5F:C8:6A:F9:58:00:07:E2:6C:F5:3D:
                                E8:46:D5:D9:60:56:4F
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 56:14:06:9A:2F:D7:C2:EC:D3:F5:E1:BD:44:B2:3E:C7:
                                46:76:B9:BC:99:11:5C:C0:EF:94:98:55:D6:89:D0:DD
                    Timestamp : Oct 22 19:21:01.195 2017 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:23:6B:99:34:C6:28:CA:9B:85:43:80:C8:
                                46:21:B5:02:C5:D8:51:38:99:4B:03:92:A8:32:63:9F:
                                C2:E5:3D:93:02:21:00:8A:1C:D5:B6:39:AF:A6:10:A7:
                                26:6D:E8:32:CE:BA:EB:DC:F4:6B:09:60:6F:06:EA:AF:
                                B5:B2:56:C7:4E:56:B1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:4B:BD:B7:75:CE:60:BA:E1:42:69:1F:AB:E1:9E:66:
                                A3:0F:7E:5F:B0:72:D8:83:00:C4:7B:89:7A:A8:FD:CB
                    Timestamp : Oct 22 19:21:01.752 2017 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:6E:0A:50:2F:65:E3:74:93:89:54:79:E2:
                                17:26:B3:D4:9A:F8:02:14:6A:2C:A3:26:3F:40:FB:6E:
                                1B:58:09:63:02:21:00:8B:31:1A:A7:DB:15:EB:ED:92:
                                95:1D:51:6C:E2:B4:C0:50:0E:18:43:8A:DB:1F:13:AF:
                                BF:EF:3D:87:9E:AB:03
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : BB:D9:DF:BC:1F:8A:71:B5:93:94:23:97:AA:92:7B:47:
                                38:57:95:0A:AB:52:E8:1A:90:96:64:36:8E:1E:D1:85
                    Timestamp : Oct 22 19:21:01.177 2017 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:24:E5:35:66:EA:BE:33:CF:0B:7D:FE:67:
                                D3:1F:A4:74:48:0C:CC:C7:21:68:CD:06:DD:0E:26:82:
                                E5:19:78:EC:02:21:00:E5:CF:2C:B8:06:1D:18:77:5D:
                                1F:14:17:28:2B:B6:63:4D:44:DF:0D:C6:E3:A5:24:19:
                                60:D7:91:6B:B0:FD:74
    Signature Algorithm: sha256WithRSAEncryption
         18:0e:67:4b:48:07:62:4e:9f:45:81:26:e5:ec:e9:c5:f2:9b:
         ea:b7:6b:16:fa:f0:9f:21:22:29:24:49:37:a7:37:8f:51:8c:
         bc:15:02:f9:27:1a:7f:2e:85:15:29:38:e8:3c:2c:b6:b3:f3:
         06:e4:9a:c0:ea:66:e9:df:fc:8b:ea:f7:6a:05:cf:b1:1a:09:
         fa:78:42:d0:0c:63:d0:fa:9c:8f:be:d7:3f:ef:93:27:9e:9b:
         66:8a:4a:f3:71:5f:2a:7e:dc:48:ad:e0:46:44:b8:4f:50:48:
         99:83:ce:c5:d4:1e:5f:0d:c7:b5:35:22:a8:76:f3:b4:a4:4c:
         bc:33:14:04:38:55:78:43:d7:af:be:29:85:46:36:76:b2:e0:
         92:78:94:da:18:b6:87:5e:56:40:76:9f:c3:74:8b:c5:a0:18:
         d7:9e:dd:c9:7a:f2:3f:59:61:20:76:81:f2:51:d4:71:9c:da:
         0c:38:92:55:8d:3d:11:a8:30:af:6c:f3:ba:b0:a6:1e:e8:34:
         91:fd:67:96:26:d7:54:7a:34:d9:b2:3e:d9:08:4d:18:fd:2a:
         79:c9:20:23:49:2c:71:20:3a:05:2e:77:34:c0:e3:24:88:06:
         96:67:d6:59:b4:5c:17:21:23:5c:c5:ed:eb:47:ae:b1:e7:b3:
         a1:27:29:e0

https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml’ için indirme(curl)
Hata kodu: Curl error 60

That is not an Repo for Tumbleweed.

Please post:

zypper lr -d
uname -a
/sbin/lspci -nnk | grep -EiA3 'vga|3d|display'

This looks OK. Could you show all certificates in a chains?

echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 -showcerts

The result same in Tumbleweed repo.

zypper lr -d
Repository priorities are without effect. All enabled repositories share the same priority.

# | Alias                                | Name                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                                      | Service
--+--------------------------------------+-----------------------------+---------+-----------+---------+----------+--------+------------------------------------------------------------------------------------------+--------
1 | NVIDIA                               | NVIDIA                      | Yes     | ( p) Yes  | Yes     |   99     | NONE   | https://download.nvidia.com/opensuse/tumbleweed                                          |        
2 | openSUSE-20180502-0                  | openSUSE-20180502-0         | No      | ----      | ----    |   99     | rpm-md | hd:///?device=/dev/disk/by-id/usb-TOSHIBA_TransMemory_54B80A3FA799C181800250CF-0:0-part2 |        
3 | packman.inode.at-openSUSE_Tumbleweed | Packman Repository          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://packman.inode.at/suse/openSUSE_Tumbleweed/                                        |        
4 | repo-debug                           | openSUSE-Tumbleweed-Debug   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/tumbleweed/repo/oss/                                  |        
5 | repo-non-oss                         | openSUSE-Tumbleweed-Non-Oss | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/tumbleweed/repo/non-oss/                                    |        
6 | repo-oss                             | openSUSE-Tumbleweed-Oss     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/tumbleweed/repo/oss/                                        |        
7 | repo-source                          | openSUSE-Tumbleweed-Source  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/tumbleweed/repo/oss/                                 |        
8 | repo-update                          | openSUSE-Tumbleweed-Update  | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/tumbleweed/                                          |
uname -a
Linux linux-xw9x 4.16.6-1-default #1 SMP PREEMPT Mon Apr 30 20:33:51 UTC 2018 (566acbc) x86_64 x86_64 x86_64 GNU/Linux
/sbin/lspci -nnk | grep -EiA3 'vga|3d|display'
00:02.0 VGA compatible controller [0300]: Intel Corporation Haswell-ULT Integrated Graphics Controller [8086:0a16] (rev 0b)
        Subsystem: Lenovo Device [17aa:380d]
        Kernel driver in use: i915
        Kernel modules: i915
--
03:00.0 3D controller [0302]: NVIDIA Corporation GM108M [GeForce 840M] [10de:1341] (rev a2)
        Subsystem: Lenovo Device [17aa:380d]
        Kernel driver in use: nouveau
        Kernel modules: nouveau
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify return:1
depth=0 C = US, ST = California, L = Santa Clara, O = NVIDIA Corporation, OU = IT Department, CN = *.nvidia.com
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Santa Clara/O=NVIDIA Corporation/OU=IT Department/CN=*.nvidia.com
   i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
-----BEGIN CERTIFICATE-----
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
-----END CERTIFICATE-----
 2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=US/ST=California/L=Santa Clara/O=NVIDIA Corporation/OU=IT Department/CN=*.nvidia.com
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4853 bytes and written 330 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 2CB82DB0ABBB0FE6DE11428E11763FD6B7FDEE1BF2AF7A84BEB9B7A9FF6099F2
    Session-ID-ctx: 
    Master-Key: CA0429A27AD4CAEE08C460FA33858899BCB30867675CCC22757169521A07F4D57469C01914252B7C0AFB404E9D94A076
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 3a 8c d4 1d d2 d7 be cf-c5 c6 8b 46 21 55 15 6c   :..........F!U.l
    0010 - 9d f0 74 93 e2 7f f1 b0-22 a6 d2 88 04 6c 6b 3c   ..t....."....lk<
    0020 - a1 15 38 c1 e0 8d ac 2d-ff 63 77 37 cd d3 0c bf   ..8....-.cw7....
    0030 - 17 77 64 4c e2 d9 4d 96-44 4d d5 fb b1 7e ff ee   .wdL..M.DM...~..
    0040 - f4 6f 2b c7 b4 e6 05 ef-d3 85 ff 35 ca 41 0c 41   .o+........5.A.A
    0050 - f2 c4 4d e7 f5 6c fe 42-f7 1b 0e 1b 26 b7 36 16   ..M..l.B....&.6.
    0060 - 6f 60 bb dc cf 44 a1 a8-60 53 06 33 fb 55 2c 41   o`...D..`S.3.U,A
    0070 - 78 86 c1 15 35 03 11 58-dc 89 3b af 8b 73 71 2e   x...5..X..;..sq.
    0080 - 2a 76 5d 7b 2f b4 b0 05-18 9f db b2 f1 1a 83 8f   *v]{/...........
    0090 - 18 4e f6 74 71 c1 cf 0a-84 4a 8b e8 cb a2 4b ac   .N.tq....J....K.
    00a0 - fe 3d f7 6c c9 06 6f 26-f6 71 f8 c2 68 d5 f1 c9   .=.l..o&.q..h...

    Start Time: 1526196883
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: yes
---
DONE

All certificates look OK. Do you still have the same problem? Otherwise it could be missing root certificate.

  1. Does it work with http instead of https?
  2. Can you access this https URL with any browser? What browser says about security of this URL?
  3. Can you post output of “curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml
  4. What “ls -l /etc/ssl/certs/3513523f.0” and “openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256” say?
  1. Yes, it does.
  2. Yes I can acces with Mozilla Firefox. Mozilla Firefox says it is secure.
curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml
*   Trying 192.229.220.191...
* TCP_NODELAY set
* Connected to download.nvidia.com (192.229.220.191) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=California; L=Santa Clara; O=NVIDIA Corporation; OU=IT Department; CN=*.nvidia.com
*  start date: Oct 22 00:00:00 2017 GMT
*  expire date: Oct 26 12:00:00 2020 GMT
*  subjectAltName: host "download.nvidia.com" matched cert's "*.nvidia.com"
*  issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5577e67dc5f0)
> GET /opensuse/leap/42.3/repodata/repomd.xml HTTP/2
> Host: download.nvidia.com
> User-Agent: curl/7.59.0
> Accept: */*
> 
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
< HTTP/2 200 
< accept-ranges: bytes
< cache-control: max-age=604800
< content-type: text/xml
< date: Sun, 13 May 2018 09:30:12 GMT
< etag: "1041457094"
< expires: Sun, 20 May 2018 09:30:12 GMT
< last-modified: Wed, 11 Apr 2018 14:43:14 GMT
< server: ECAcc (vie/F2F0)
< vary: Accept-Encoding
< x-cache: HIT
< content-length: 1510
< 
<?xml version="1.0" encoding="UTF-8"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
 <revision>1522781512</revision>
<data type="filelists">
  <checksum type="sha256">14c3aa77114d7affdc772e3dc08f261ab32750431857ab167de519c040a789a5</checksum>
  <open-checksum type="sha256">2b377a2fed77b4302c9427eb535e690f4434ffb1196d6dca11a6bbb6ef58e07c</open-checksum>
  <location href="repodata/14c3aa77114d7affdc772e3dc08f261ab32750431857ab167de519c040a789a5-filelists.xml.gz"/>
  <timestamp>1522781807</timestamp>
  <size>6189</size>
  <open-size>80095</open-size>
</data>
<data type="other">
  <checksum type="sha256">4b99bf02f546b2faec7a88625011a87a45d87d4b5fb8891eaf96459812978dea</checksum>
  <open-checksum type="sha256">7171927dd3addec1ac48751a307d42302c6ab637d8c9a5222672620cf98707b0</open-checksum>
  <location href="repodata/4b99bf02f546b2faec7a88625011a87a45d87d4b5fb8891eaf96459812978dea-other.xml.gz"/>
  <timestamp>1522781807</timestamp>
  <size>114153</size>
  <open-size>523201</open-size>
</data>
<data type="primary">
  <checksum type="sha256">0c0de50a85416cab1404b0ade6cc5e9aea61cd251a763982059d2dae38d30f00</checksum>
  <open-checksum type="sha256">58b417f457e2ed8d3e5b94aa6fd39cdc5113be071e981e2417a12d9f02e632f0</open-checksum>
  <location href="repodata/0c0de50a85416cab1404b0ade6cc5e9aea61cd251a763982059d2dae38d30f00-primary.xml.gz"/>
  <timestamp>1522781807</timestamp>
  <size>21355</size>
  <open-size>192657</open-size>
</data>
</repomd>
* Connection #0 to host download.nvidia.com left intact
ls -l /etc/ssl/certs/3513523f.0
lrwxrwxrwx 1 root root 27 May 13 12:25 /etc/ssl/certs/3513523f.0 -> DigiCert_Global_Root_CA.pem
openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256
SHA256 Fingerprint=43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61

apologies if this is in the wrong place… I’m having the same problem on Leap 15.3. Looks like I’ll need two posts to respond to all the same questions.

# zypper --gpg-auto-import-keys ref
Retrieving repository 'NVIDIA' metadata .........................................[error]
Repository 'NVIDIA' is invalid.
[NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL
History:
 - File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz' not found on medium 'https://download.nvidia.com/opensuse/leap/15.3'
 - Can't provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz

Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'NVIDIA' because of the above error.
Repository 'openSUSE-Leap-15.3-1' is up to date.                                        
Repository 'Update repository of openSUSE Backports' is up to date.                     
Repository 'Non-OSS Repository' is up to date.                                          
Repository 'Main Repository' is up to date.                                             
Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.
Repository 'Main Update Repository' is up to date.                                      
Repository 'Update Repository (Non-Oss)' is up to date.             

# echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 | openssl x509 -inform pem -noout -text
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
verify return:1
DONE
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:46:d4:a5:67:fc:6f:c8:cf:36:a1:4d:90:31:60
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Sep  7 00:00:00 2021 GMT
            Not After : Oct  8 23:59:59 2022 GMT
        Subject: C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:be:2e:b4:75:88:88:f5:37:eb:b8:0f:d3:
                    61:29:5d:4d:87:88:71:af:a9:2f:ba:98:2b:4a:be:
                    43:07:62:ee:4f:05:86:f8:e7:54:f9:57:cd:4c:de:
                    d4:07:f2:f1:02:f1:43:76:a0:0d:88:19:22:4c:11:
                    3b:dd:90:0e:12:01:66:e4:48:e8:95:c1:ea:15:9a:
                    55:ef:da:d1:d3:01:73:8b:d9:c6:6c:f8:f1:d9:2e:
                    e1:1a:40:c6:7d:66:1b:20:d0:e2:10:b4:5b:56:ab:
                    f8:9f:9d:b7:6b:69:f5:df:3a:6c:b4:ed:32:29:07:
                    96:01:b7:21:30:91:d1:8f:c5:9a:37:33:9b:ec:b5:
                    ec:14:a8:bb:4d:16:a1:80:79:9c:53:df:be:d6:68:
                    66:a2:4f:a8:69:22:5c:b2:52:e8:27:27:74:08:6f:
                    1b:16:03:ef:77:6e:6c:fd:07:2b:3e:06:ac:89:be:
                    48:1d:30:f2:ca:53:bf:79:f0:41:5e:76:94:4e:58:
                    74:b3:35:17:75:26:28:56:67:36:84:55:0f:9a:83:
                    de:0e:b5:07:da:1d:ae:5c:fb:2d:c4:6e:c9:de:9a:
                    77:40:b5:1c:80:03:da:c3:f1:25:80:79:16:8e:35:
                    58:6e:32:6d:e1:de:86:21:a9:a4:aa:f8:91:a7:6c:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4

            X509v3 Subject Key Identifier: 
                3F:05:46:5B:68:41:F1:6C:6A:87:E9:7B:45:82:EF:BB:EE:B4:1C:0D
            X509v3 Subject Alternative Name: 
                DNS:us.vrzn.download.nvidia.com, DNS:*.nvidia.com, DNS:nvidia.com, DNS:download.gfe.nvidia.com, DNS:download-cdn.gfe.nvidia.com, DNS:international.download.nvidia.com, DNS:download.pgroup.com, DNS:on-demand.gputechconf.com, DNS:hdprogressive.3dvisionlive.com, DNS:http.developer.nvidia.com, DNS:downloadstage-cdn.gfe.nvidia.com
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 29:79:BE:F0:9E:39:39:21:F0:56:73:9F:63:A5:77:E5:
                                BE:57:7D:9C:60:0A:F8:F9:4D:5D:26:5C:25:5D:C7:84
                    Timestamp : Sep  7 18:38:19.025 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:7C:43:AB:84:18:EB:53:2C:FA:0A:5C:05:
                                94:35:56:F7:DF:4F:45:58:26:82:A9:CE:AC:76:7E:55:
                                48:48:5E:BF:02:21:00:C7:4E:B5:B9:53:DF:67:17:6B:
                                03:B3:45:DD:02:EB:EB:FB:0E:3A:A5:B9:27:60:8E:FB:
                                1F:94:FA:0A:8B:98:71
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 51:A3:B0:F5:FD:01:79:9C:56:6D:B8:37:78:8F:0C:A4:
                                7A:CC:1B:27:CB:F7:9E:88:42:9A:0D:FE:D4:8B:05:E5
                    Timestamp : Sep  7 18:38:19.021 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C3:60:57:85:5F:6D:89:4A:18:17:55:
                                37:B0:24:35:D6:12:D6:BF:2B:C7:08:6B:78:90:8A:97:
                                59:55:78:DA:4D:02:21:00:80:5E:37:58:78:47:FF:D0:
                                D2:86:9D:23:DB:EC:DA:91:CC:14:3A:11:34:4D:19:F4:
                                7F:0D:D8:C2:20:1D:14:EF
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
                                4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
                    Timestamp : Sep  7 18:38:19.008 2021 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A9:17:94:7E:2B:DA:32:31:A0:AB:B8:
                                2A:D1:D1:7E:47:14:42:0B:72:EB:1C:C9:48:3B:34:83:
                                3C:31:CF:57:6B:02:21:00:DB:1F:47:D9:86:87:45:D9:
                                8B:01:1F:7F:92:8D:9B:29:E4:FA:91:F9:53:EC:40:BC:
                                0B:4B:8C:6C:C5:E2:F3:3D
    Signature Algorithm: sha256WithRSAEncryption
         35:70:1c:84:75:a4:ab:e1:d7:fa:c5:4b:32:55:52:02:8e:6b:
         ac:4b:6f:97:01:b0:df:e4:ae:e9:16:be:50:d1:0d:d4:43:02:
         f2:47:10:d6:b3:29:e8:4b:80:ec:8f:ab:9d:35:b8:82:cd:7c:
         d3:12:69:22:54:ca:56:60:c4:9a:c2:9e:ae:8d:d0:1a:a1:4d:
         5f:1f:0e:d7:0b:cd:15:26:cc:44:77:60:77:c2:7f:b9:d2:fb:
         13:a9:56:b2:e4:0d:a3:c1:94:5b:45:ca:b2:bd:a1:36:d0:26:
         d2:20:18:3f:de:60:2a:68:2d:e3:68:49:0a:66:e5:d0:41:02:
         c3:39:e8:04:42:5c:9f:84:66:c4:11:23:d8:c7:76:b0:7b:54:
         10:b8:47:10:28:ae:76:25:c1:9c:c0:38:4a:33:30:0c:4b:de:
         7b:5e:26:ca:9d:97:23:e7:f3:e4:b6:6d:96:a1:be:c2:c5:ff:
         00:8d:33:90:44:88:39:0f:c0:b8:8d:ba:7c:9e:af:06:ea:f7:
         fd:43:af:67:24:b6:7f:8d:ed:d8:0f:18:85:89:c7:a0:8c:38:
         89:2b:75:54:d2:b4:f1:d4:fc:f3:2e:74:87:cc:b0:1a:9c:da:
         02:81:fd:f0:47:86:6a:49:81:6c:8a:f3:62:87:e6:3d:c3:cf:
         54:81:1a:c9
localhost:/home/etoid # 


# zypper lr -d
#  | Alias                       | Name                                                                                        | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                     | Service
---+-----------------------------+---------------------------------------------------------------------------------------------+---------+-----------+---------+----------+--------+-------------------------------------------------------------------------+--------
 1 | NVIDIA                      | NVIDIA                                                                                      | Yes     | ( p) Yes  | Yes     |   99     | NONE   | https://download.nvidia.com/opensuse/leap/15.3                          | 
 2 | openSUSE-Leap-15.3-1        | openSUSE-Leap-15.3-1                                                                        | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/oss            | 
 3 | repo-backports-debug-update | Update repository with updates for openSUSE Leap debuginfo packages from openSUSE Backports | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/update/leap/15.3/backports_debug/          | 
 4 | repo-backports-update       | Update repository of openSUSE Backports                                                     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/backports/                | 
 5 | repo-debug                  | Debug Repository                                                                            | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/oss/     | 
 6 | repo-debug-non-oss          | Debug Repository (Non-OSS)                                                                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/distribution/leap/15.3/repo/non-oss/ | 
 7 | repo-debug-update           | Update Repository (Debug)                                                                   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/oss/                | 
 8 | repo-debug-update-non-oss   | Update Repository (Debug, Non-OSS)                                                          | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/non-oss/            | 
 9 | repo-non-oss                | Non-OSS Repository                                                                          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/non-oss/       | 
10 | repo-oss                    | Main Repository                                                                             | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/distribution/leap/15.3/repo/oss/           | 
11 | repo-sle-debug-update       | Update repository with debuginfo for updates from SUSE Linux Enterprise 15                  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/update/leap/15.3/sle/                | 
12 | repo-sle-update             | Update repository with updates from SUSE Linux Enterprise 15                                | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/sle/                      | 
13 | repo-source                 | Source Repository                                                                           | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/distribution/leap/15.3/repo/oss/    | 
14 | repo-update                 | Main Update Repository                                                                      | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/oss/                      | 
15 | repo-update-non-oss         | Update Repository (Non-Oss)                                                                 | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/update/leap/15.3/non-oss/             


# uname -a
Linux localhost 5.3.18-59.24-default #1 SMP Mon Sep 13 15:06:42 UTC 2021 (2f872ea) x86_64 x86_64 x86_64 GNU/Linux

# /sbin/lspci -nnk | grep -EiA3 'vga|3d|display'
02:00.0 VGA compatible controller [0300]: NVIDIA Corporation GK110B [GeForce GTX 780 Ti] [10de:100a] (rev a1)
        Subsystem: ASUSTeK Computer Inc. Device [1043:849e]
        Kernel driver in use: nouveau
        Kernel modules: nouveau
# echo | openssl s_client -servername download.nvidia.com -connect download.nvidia.com:443 -showcerts
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
verify return:1
depth=0 C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
verify return:1
---
Certificate chain
0 s:C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com
i:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1 s:C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=C = US, ST = California, L = Santa Clara, O = Nvidia Corporation, CN = us.vrzn.download.nvidia.com

issuer=C = US, O = DigiCert Inc, CN = DigiCert TLS RSA SHA256 2020 CA1

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3921 bytes and written 755 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE

http & https both seem to be working? 


# curl -vvv https://download.nvidia.com/opensuse/leap/42.3/repodata/repomd.xml
*   Trying 192.229.210.202:443...
* TCP_NODELAY set
* Connected to download.nvidia.com (192.229.210.202) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
*  subject: C=US; ST=California; L=Santa Clara; O=Nvidia Corporation; CN=us.vrzn.download.nvidia.com
*  start date: Sep  7 00:00:00 2021 GMT
*  expire date: Oct  8 23:59:59 2022 GMT
*  subjectAltName: host "download.nvidia.com" matched cert's "*.nvidia.com"
*  issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5638711ed820)
> GET /opensuse/leap/42.3/repodata/repomd.xml HTTP/2
> Host: download.nvidia.com
> User-Agent: curl/7.66.0
> Accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Connection state changed (MAX_CONCURRENT_STREAMS == 100)!
< HTTP/2 200 
< accept-ranges: bytes
< age: 378366
< cache-control: max-age=604800
< content-type: text/xml
< date: Sun, 26 Sep 2021 07:23:09 GMT
< etag: "1691999867"
< expires: Sun, 03 Oct 2021 07:23:09 GMT
< last-modified: Mon, 19 Aug 2019 16:18:02 GMT
< server: ECAcc (mic/9AB3)
< vary: Accept-Encoding
< x-cache: HIT
< x-vdms-version: 100.16
< content-length: 1954
< 
<?xml version="1.0" encoding="UTF-8"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
  <revision>1566228060</revision>
  <data type="filelists">
    <location href="repodata/68edd4d4431d5518d29555c5e6fffd4423294ae9005e17f03a268e42a3bbb16e-filelists.xml.gz"/>
    <checksum type="sha256">68edd4d4431d5518d29555c5e6fffd4423294ae9005e17f03a268e42a3bbb16e</checksum>
    <timestamp>1566228064</timestamp>
    <size>8776</size>
    <open-size>127931</open-size>
    <open-checksum type="sha256">f6c0a1501ab27f921b9f65c6c83bc55afe2686a8fd65c8982d0c24e48038f6ba</open-checksum>
  </data>
  <data type="other">
    <location href="repodata/9997f1bd9e827410f61f549a39409913b51999ea8560f3056c36ecf12b83f458-other.xml.gz"/>
    <checksum type="sha256">9997f1bd9e827410f61f549a39409913b51999ea8560f3056c36ecf12b83f458</checksum>
    <timestamp>1566228064</timestamp>
    <size>158250</size>
    <open-size>610764</open-size>
    <open-checksum type="sha256">48be0ed8ac620b75eac21ac3708c57b2ea6320bbb71b71b43db8816177fa482c</open-checksum>
  </data>
  <data type="primary">
    <location href="repodata/f00be618ab3a0f560515cb0b5f5fbc9bb07f38e913a13d3aebc0b67cddcc800b-primary.xml.gz"/>
    <checksum type="sha256">f00be618ab3a0f560515cb0b5f5fbc9bb07f38e913a13d3aebc0b67cddcc800b</checksum>
    <timestamp>1566228064</timestamp>
    <size>29915</size>
    <open-size>260482</open-size>
    <open-checksum type="sha256">d91942556051cb5c9aa8d4d9f86cc937f8200e1be0178b42d766584a149a9f29</open-checksum>
  </data>
  <data type="susedata">
    <location href="repodata/susedata.xml.gz"/>
    <checksum type="sha256">01825787500406bbca4f3910d59bba8ec3e3e07df5303eee41c9f2c9a41a0e2f</checksum>
    <timestamp>1566228065</timestamp>
    <size>4628</size>
    <open-size>95723</open-size>
    <open-checksum type="sha256">fb0eac7e5b542b096b1c217b33a0fe847b22a3397299018c51e0d6998d4190c7</open-checksum>
  </data>
</repomd>
* Connection #0 to host download.nvidia.com left intact

# ls -l /etc/ssl/certs/3513523f.0
lrwxrwxrwx 1 root root 27 Sep 25 12:10 /etc/ssl/certs/3513523f.0 -> DigiCert_Global_Root_CA.pem

# openssl x509 -in /etc/ssl/certs/3513523f.0 -fingerprint -noout -sha256
SHA256 Fingerprint=43:48:A0:E9:44:4C:78:CB:26:5E:05:8D:5E:89:44:B4:D8:4F:96:62:BD:26:DB:25:7F:89:34:A4:43:C7:01:61

I see what the problem is but I’m not sure how to fix it.

If I go to https://download.nvidia.com/opensuse/leap/15.3/repodata/

Index of /opensuse/leap/15.3/repodata

..
34bded2538199fa2710841ff824d6b9fb660396d3f179950cdb389b54283fc97-filelists.xml.gz 12KB 2021-09-21 22:48
6165bd9f8d5a4aa9f0625c2ae413d3a9f78cab194723de6f00bafc38a23059a4-primary.xml.gz 12KB 2021-09-21 22:48
b94b730ee370b5ecfdb0faf8a2764f6f587b58df35e040d1b4e0433dc6091e8d-other.xml.gz 144KB 2021-09-21 22:48
repomd.xml 4.0KB 2021-09-21 22:48
repomd.xml.asc 4.0KB 2021-09-21 22:48
repomd.xml.key 4.0KB 2021-09-21 22:48
susedata.xml.gz 4.0KB 2021-09-21 22:48

None of these files match what the refresh command is looking for.

~> sudo zypper refresh
Retrieving repository ‘NVIDIA’ metadata …[error]
Repository ‘NVIDIA’ is invalid.
[NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL
History:

  • File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz’ not found on medium ‘https://download.nvidia.com/opensuse/leap/15.3
  • Can’t provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz

Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository ‘NVIDIA’ because of the above error.

What about deleting the repo and adding it?

also see here:

/var/cache/zypp/raw/

I did try deleting and adding. That’s how I figured out the filenames were wrong.

That directory has another directory for nvidia but it’s empty.

@localhost:/var/cache/zypp/raw> ls
NVIDIA                repo-backports-update  repo-oss         repo-update
openSUSE-Leap-15.3-1  repo-non-oss           repo-sle-update  repo-update-non-oss
@localhost:/var/cache/zypp/raw> cd NVIDIA
@localhost:/var/cache/zypp/raw/NVIDIA> ls
@localhost:/var/cache/zypp/raw/NVIDIA> 


:~> sudo zypper removerepo NVIDIA
Removing repository 'NVIDIA' .....................................................[done]
Repository 'NVIDIA' has been removed.
etoid@localhost:~> sudo zypper addrepo --refresh 'https://download.nvidia.com/opensuse/leap/15.3' NVIDIA
Adding repository 'NVIDIA' .......................................................[done]
Repository 'NVIDIA' successfully added

URI         : https://download.nvidia.com/opensuse/leap/15.3
Enabled     : Yes
GPG Check   : Yes
Autorefresh : Yes
Priority    : 99 (default priority)

Repository priorities are without effect. All enabled repositories share the same priority.
etoid@localhost:~> sudo zypper refresh
Retrieving repository 'NVIDIA' metadata .........................................[error]
Repository 'NVIDIA' is invalid.
[NVIDIA|https://download.nvidia.com/opensuse/leap/15.3] Valid metadata not found at specified URL                                                                               
History:                                                                                
 - File './repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz' not found on medium 'https://download.nvidia.com/opensuse/leap/15.3'       
 - Can't provide ./repodata/9880bae9291b57cf4d403bbab7a14de4952da53bb179adf356df009e25923de4-primary.xml.gz                                                                     

Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'NVIDIA' because of the above error.
Repository 'openSUSE-Leap-15.3-1' is up to date.                                        
Repository 'Update repository of openSUSE Backports' is up to date.                     
Repository 'Non-OSS Repository' is up to date.                                          
Repository 'Main Repository' is up to date.                                             
Repository 'Update repository with updates from SUSE Linux Enterprise 15' is up to date.
Repository 'Main Update Repository' is up to date.                                      
Repository 'Update Repository (Non-Oss)' is up to date.                                 
Some of the repositories have not been refreshed because of an error.
e@localhost:~> 

Is the directoty in /var/cache/zypp/raw also removed when you remove the Repos?

sudo zypper addrepo --refresh ‘Index of /opensuse/leap/15.3’ NVIDIA

Maybe name it not as the old one…

I do not know, if the download.nvidia.com is a redirector…

No it wasn’t.

I got fed up and tried to go back to Leap 15.2 but I’m having the same problem so, back to 15.3 it is… I’ll let you know how it goes. I’ve gotten a lot more reading in this time.

i think you are using repositorys, that are not for your leap- version. always make sure, that you do not use repos like 42.x in leap 15.x (should be ok there, but it was not always)

do you have graphical system and can run yast in graphic mode? it can be, that your network is not up, if you are only on the console right now…
if so, this descriptions works for me:
https://opensuse.github.io/openSUSE-docs-revamped-temp/install_proprietary/
from scratch, which should have the right repositories already.

Instead of selectinge the nvidia… in software, just do install recommended packages. if that does not install the nvidia, your graphics are not supportet by nvidia on the leap version any more. use nouveau than instead if possible.

you can check out, which driver you need for your graphic here:
https://www.nvidia.com/en-us/drivers/unix/

Hi
The OP’s 780Ti is supported in Leap 15.3 with the G04 series (390.144).