been getting ssl error trying to update… for about 1 week.
see pic. how to fix this ?
I get the same output, also pointed at the AU mirror of the tumbleweed repositories. I think the workaround is changing the base URL of each repository in /etc/zypp/repos.d/ to point to a different mirror.
I would love to know if it’s a configuration issue that it errors out instead of automatically using a different OpenSUSE repository.
“it” is using whatever mirror “it” is being redirected to by the download.opensuse.org (which is a redirector). The mirror d.o.o chooses does have the content. I suspect the validity of the SSL certificate is not taken in account by the redirector.
You can list multiple URLs in the baseurl= in the repository definition in which case “it” should be trying next one if a previous failed. You could try enabling new parallel download in zypper, but that probably would also need additional metalink= option for zypper to fetch the list of different URLs in advance.
Or simply use plain HTTP instead of HTTPS.
edited the offending https to http , all good now. thanks.
Sorry if my choice of phrasing offended… I was just trying to lend a hand.
This is how one of my repositories is currently configured, it’s pointing at the mirror directly instead of the redirector:
[repo-source]
name=openSUSE-Tumbleweed-Source
enabled=0
autorefresh=1
path=/
keeppackages=0
baseurl=https://mirrorcache-au.opensuse.org/source/tumbleweed/repo/oss/
I tried changing the url to https://download.opensuse.org/source/tumbleweed/repo/oss/, but it does seem to skip the SSL check when selecting a mirror so the same issue remains. My new definition is this:
[repo-source]
name=openSUSE-Tumbleweed-Source
enabled=0
autorefresh=1
path=/
keeppackages=0
baseurl=https://download.opensuse.org/source/tumbleweed/repo/oss/
baseurl=https://slc-mirror.opensuse.org/source/tumbleweed/repo/oss/
This succeeds on zypper ref without needing to switch to the http protocol, which I think is best to avoid doing if https is available.
Thanks for the pointers on the multiple baseurl definitions, seems like a good backup option to the mirror selected by download.opensuse.org.