Http Proxy Help: Errors during downloading metadata for repository 'baseos':

General
1

Having problems with using my proxy server with dnf, I get this error:

root@kvmserver nasheayahu]# dnf install epel-release epel-next-release
Rocky Linux 9 - BaseOS                                                                                                                                        0.0  B/s |   0  B     00:02    
Errors during downloading metadata for repository 'baseos':
  - Curl error (35): SSL connect error for https://mirrors.rockylinux.org/mirrorlist?arch=x86_64&repo=BaseOS-9 [error:0A00010B:SSL routines::wrong version number]
Error: Failed to download metadata for repo 'baseos': Cannot prepare internal mirrorlist: Curl error (35): SSL connect error for https://mirrors.rockylinux.org/mirrorlist?arch=x86_64&repo=BaseOS-9 [error:0A00010B:SSL routines::wrong version number]

What can I check to resolve this issue.

Thanks!..

2

What is the config on your proxy server? Are you using SSL interception?

3

Afternoon,

After more searching, I read this curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number,

being I’m not using any SSL or user name login for the proxy at the moment I did not need the,

export HTTPS_PROXY=https://10.30.81.100:3128

in the /etc/dnf/dnf.conf,

proxy=http://10.30.81.100:3128
### removed #### proxy=https://10.30.81.100:3128

or /etc/profile

export HTTP_PROXY=http://10.30.81.100:3128
### removed #### export HTTPS_PROXY=https://10.30.81.100:3128
export FTP_PROXY=ftp://10.30.81.100:3128
export NO_PROXY=localhost,::1,.kbbn-7.com,192.168.0.0/16,10.30.0.0/16

its working as expected now, for this is my Lab Development Environment to learn about network infrastructure before going live some time next year. I have a lot to learn, and I want to master my system first before allowing users to connect and use the services.

Help from the forum would be priceless! :nerd_face: :grinning:

4

Good to hear that. Yes, from my understanding, the connection to your proxy should be http:// instead of https://. That doesn’t mean your connection isn’t encrypted though. The proxy in this case simply relays encrypted traffic between you and the server via the CONNECT method.

1 Like