Download SSL cert has expired

Rocky Linux General
1

Pulling the 8.5 DVD ISO:

WARNING: cannot verify download.rockylinux.org’s certificate, issued by ‘/C=US/O=Let’s Encrypt/CN=R3’:
Issued certificate has expired.

2

Must be one of the mirrors. I checked the cert via a browser and it expires in March…

–2022-01-09 10:27:59-- https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8.5-x86_64-dvd1.iso

Resolving download.rockylinux.org (download.rockylinux.org)… 199.232.194.132, 199.232.198.132, 2a04:4e42:4d::644, …

Connecting to download.rockylinux.org (download.rockylinux.org)|199.232.194.132|:443… connected.

ERROR: cannot verify download.rockylinux.org’s certificate, issued by ‘/C=US/O=Let’s Encrypt/CN=R3’:

Issued certificate has expired.

3

I just checked, and working fine.

[ian@elise Downloads]$ wget https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8.5-x86_64-dvd1.iso
--2022-01-09 17:45:02--  https://download.rockylinux.org/pub/rocky/8/isos/x86_64/Rocky-8.5-x86_64-dvd1.iso
Resolving download.rockylinux.org (download.rockylinux.org)... 199.232.194.132, 199.232.198.132, 2a04:4e42:1b::644
Connecting to download.rockylinux.org (download.rockylinux.org)|199.232.194.132|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10716446720 (10.0G) [application/octet-stream]
Saving to: ‘Rocky-8.5-x86_64-dvd1.iso’

     Rocky-8.5-x86_   0%[                    ]  13.67M  13.0MB/s

In the browser certificate valid until 23 March 2022. Maybe was just a temporary problem?

4

Make sure the host OS is up to date. There are some versions of openssl that will report an expired letsencrypt certificate if the ca-certificates is not properly up to date.