Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: ``` $ sudo dnf update Fedora 35 - x86_64 0.0 B/s | 0 B 00:03 Errors during downloading metadata for repository 'fedora': - Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.fedoraproject.org/metalink?repo=fedora-35&arch=x86_64 [SSL certificate problem: CA certificate key too weak] Error: Failed to download metadata for repo 'fedora': Cannot prepare internal mirrorlist: Curl error (60): SSL peer certificate or SSH remote key was not OK for https://mirrors.fedoraproject.org/metalink?repo=fedora-35&arch=x86_64 [SSL certificate problem: CA certificate key too weak] ``` Version-Release number of selected component (if applicable): 4.11.1-3.fc35 How reproducible: Update the system. Steps to Reproduce: 1. Enter `sudo dnf update` Actual results: Error. Expected results: Update system w/o errors. Additional info:
I am really sorry but this type of issues are not related to DNF. It directly says `[SSL certificate problem: CA certificate key too weak]` and it is good idea that DNF (curl) rejected to use such a connection. According to issue description I believe that the issue is in infrastructure therefore changing component to `distribution`.
I assume you set your crypto policy to 'FUTURE' ? *** This bug has been marked as a duplicate of bug 1832292 ***