Error messages shown as update packages related to 'nss'

Rocky Linux Help & Support
1

As update the packages related to ‘nss’, I get error messages as follows:

[MIRROR] nss-softokn-3.67.0-7.el8_5.x86_64.rpm: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://hkg.mirror.rackspace.com/rocky/8.5/AppStream/x86_64/os/Packages/n/nss-softokn-3.67.0-7.el8_5.x86_64.rpm [SSL certificate problem: certificate has expired]
[MIRROR] nss-softokn-freebl-3.67.0-7.el8_5.x86_64.rpm: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://hkg.mirror.rackspace.com/rocky/8.5/AppStream/x86_64/os/Packages/n/nss-softokn-freebl-3.67.0-7.el8_5.x86_64.rpm [SSL certificate problem: certificate has expired]
[MIRROR] nss-3.67.0-7.el8_5.x86_64.rpm: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://hkg.mirror.rackspace.com/rocky/8.5/AppStream/x86_64/os/Packages/n/nss-3.67.0-7.el8_5.x86_64.rpm [SSL certificate problem: certificate has expired]

However, the update seems successful, I would like to know why I get these error messages, and the update is really OK?

Thanks in advanced.
AY

2

the certificate expired in april

$ curl -sv https://hkg.mirror.rackspace.com
* About to connect() to hkg.mirror.rackspace.com port 443 (#0)
*   Trying 180.150.156.88...
* Connected to hkg.mirror.rackspace.com (180.150.156.88) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* Server certificate:
* 	subject: CN=*.mirror.rackspace.com,O="Rackspace US, Inc.",L=San Antonio,ST=Texas,C=US
* 	start date: Mar 04 00:00:00 2019 GMT
* 	expire date: Apr 02 12:00:00 2021 GMT
* 	common name: *.mirror.rackspace.com
* 	issuer: CN=Thawte TLS RSA CA G1,OU=www.digicert.com,O=DigiCert Inc,C=US
* NSS error -8181 (SEC_ERROR_EXPIRED_CERTIFICATE)
* Peer's Certificate has expired.
* Closing connection 0

I think that dnf tried another mirror instead and that’s why the update succeeded.

3

https://bugs.rockylinux.org/show_bug.cgi?id=182