# Yum certification error

**URL:** <https://forums.rockylinux.org/t/yum-certification-error/5727>\
**Category:** Rocky Linux Help & Support\
**Created:** [March 30, 2022, 12:18am UTC](https://forums.rockylinux.org/t/yum-certification-error/5727 "2022-03-30T00:18:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jonathan2022](https://avatars.discourse-cdn.com/v4/letter/j/65b543/32.png) [@jonathan2022](https://forums.rockylinux.org/u/jonathan2022)\
**Post date:** [March 30, 2022, 12:18am UTC](https://forums.rockylinux.org/t/yum-certification-error/5727/1 "2022-03-30T00:18:16Z")

</div>

I just installed Rock Linux 8.4 and now I get yum certificate error

Rocky Linux 8 - AppStream 0.0 B/s | 0 B 00:00  
Errors during downloading metadata for repository ‘appstream’:

- Curl error (60): Peer certificate cannot be authenticated with given CA certificates for [https://mirrors.rockylinux.org/mirrorlist?arch=x86\_64&repo=AppStream-8](https://mirrors.rockylinux.org/mirrorlist?arch=x86_64&repo=AppStream-8) [SSL certificate problem: certificate is not yet valid]  
Error: Failed to download metadata for repo ‘appstream’: Cannot prepare internal mirrorlist: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for [https://mirrors.rockylinux.org/mirrorlist?arch=x86\_64&repo=AppStream-8](https://mirrors.rockylinux.org/mirrorlist?arch=x86_64&repo=AppStream-8) [SSL certificate problem: certificate is not yet valid]  
[root@localhost ~]#

So I ran “update-crypto-policies --show” and it return “DEFAULT”

---

<div class="post-metadata">

**Author:** ![sweh](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/sweh/32/1287_2.png) [@sweh](https://forums.rockylinux.org/u/sweh)\
**Post date:** [March 30, 2022, 12:34am UTC](https://forums.rockylinux.org/t/yum-certification-error/5727/2 "2022-03-30T00:34:07Z")

</div>

Is your local clock set correctly? It sounds like it’s set sometime in the past. The certificate on [mirrors.rocklylinux.org](http://mirrors.rocklylinux.org) starts on Sunday, February 20, 2022 at 6:44:19 PM; if your clock is before then then it’ll think the cert is valid at some point in the future but not “now”.

---

<div class="post-metadata">

**Author:** ![jonathan2022](https://avatars.discourse-cdn.com/v4/letter/j/65b543/32.png) [@jonathan2022](https://forums.rockylinux.org/u/jonathan2022)\
**Post date:** [March 30, 2022, 2:07am UTC](https://forums.rockylinux.org/t/yum-certification-error/5727/3 "2022-03-30T02:07:19Z")

</div>

Yeah, thanks for pointing out the obvious… I feel like an idiot…  
I’ve been burnt on the same issue before, when I bring up a new system that never booted before… rule number 1, always set the clock! Thanks again!! Working great now!! 🙂

---

<div class="post-metadata">

**Author:** ![gerry666uk](https://avatars.discourse-cdn.com/v4/letter/g/dbc845/32.png) [@gerry666uk](https://forums.rockylinux.org/u/gerry666uk)\
**Post date:** [March 31, 2022, 2:36pm UTC](https://forums.rockylinux.org/t/yum-certification-error/5727/4 "2022-03-31T14:36:48Z")

</div>

If you used the GUI installer, you can enable networking, and then enable network time within the intaller.

---

<div class="post-metadata">

**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\
**Post date:** [August 25, 2023, 3:52am UTC](https://forums.rockylinux.org/t/yum-certification-error/5727/5 "2023-08-25T03:52:34Z")

</div>


