Description of problem: Yum cannot get mirror list for fedora and updates-testing repos. ========================================================================== [root@book ~]# yum clean all Loaded plugins: langpacks, presto, refresh-packagekit Cleaning repos: adobe-linux-x86_64 fedora rpmfusion-free rpmfusion-nonfree : updates-testing Cleaning up Everything No delta-package files removed by presto [root@book ~]# yum -d 10 repolist Not loading "blacklist" plugin, as it is disabled Loading "langpacks" plugin Loading "presto" plugin Loading "refresh-packagekit" plugin Not loading "whiteout" plugin, as it is disabled Running "config" handler for "langpacks" plugin Adding en_US to language list Running "config" handler for "presto" plugin Config time: 0.044 Yum Version: 3.4.3 COMMAND: yum -d 10 repolist Installroot: / Running "postreposetup" handler for "langpacks" plugin adobe-linux-x86_64 | 951 B 00:00 adobe-linux-x86_64/primary | 1.2 kB 00:00 rpmfusion-free | 2.7 kB 00:00 rpmfusion-free/primary_db | 373 kB 00:06 rpmfusion-nonfree | 2.7 kB 00:00 rpmfusion-nonfree/primary_db | 111 kB 00:02 adobe-linux-x86_64 2/2 Error: Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again ========================================================================== My fedora.repo file wasn't modified (checked with rpm -Va). If I take the link to mirrorlist from this file ( https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64 ) I can download the result with both wget and firefox with no problems. I don't have any proxy settings or /etc/hosts modifications. Version-Release number of selected component (if applicable): # rpm -qa yum* yum-utils-1.1.31-2.fc16.noarch yum-langpacks-0.2.4-1.fc16.noarch yum-presto-0.7.1-1.fc16.noarch yum-3.4.3-5.fc16.noarch yum-metadata-parser-1.1.4-5.fc16.x86_64 How reproducible: It started two days ago. After "yum clean all". Additional info: I run that first "yum clean all" because of the errors yum showed about some cert files. Unfortunately I don't have the exact log of what yum said that first time, and I cannot find it anywhere. If you need any other logs please ask. Workaround: I can change the fedora.repo file to use the baseurl with one specific mirror url, and then everything works, but that's not the solution of the problem.
It seems I cleaned the cache for root, but not for user. So these errors user gets while running yum search $ yum search git-svn Loaded plugins: langpacks, presto, refresh-packagekit adobe-linux-x86_64 | 951 B 00:00 Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=fedora-16&arch=x86_64 error was 14: Peer cert cannot be verified or peer cert invalid rpmfusion-free | 2.7 kB 00:00 rpmfusion-free/primary_db | 373 kB 00:00 rpmfusion-nonfree | 2.7 kB 00:00 rpmfusion-nonfree/primary_db | 111 kB 00:00 Could not get metalink https://mirrors.fedoraproject.org/metalink?repo=updates-testing-f16&arch=x86_64 error was 14: Peer cert cannot be verified or peer cert invalid At the same time root gets only "Error: Cannot retrieve repository metadata (repomd.xml) for repository: fedora. Please verify its path and try again" error.
this is a bug in the version of nss you've obtained from updates-testing. You need to run this: yum --setopt=sslverify=false downgrade nss nss-util nss-sysinit that should fix you up.
This was caused by a defective combination of the nss, nss-utils, and nss-softoken packages in updates testing where we had nss and nss-softokn at 3.13.1 and nss-softokn at 3.12.12. I have entered a ticket to remove the 3.13.1 nss and nss-util from updates testing until I can investigate this fully. By the way, in Rawhide where all three are at 3.13.1 there are no problems. That's what I intend to do in F-16 eventually - in week or two. Before I do that I need to understand very well why having nss-softokn at a previous version has caused those problems with this particular update. In principle at least we should be able to tag them independently. The point of having split NSS into three packages was to enabled us to do that. It's required by RHEL where we often keep nss-softokn behind until the new one gets FIPS 140-1 validated. That's not required for Fedora and I will bring them all in version synchrony as I had mentioned. Until then we have to stay on 3.12.10 for a while longer than we want.
nss-tools must be downgraded too : yum --setopt=sslverify=false downgrade nss nss-util nss-sysinit nss-tools I confirm that downgrading from updates-testing to stable repos fixes the issue. Thanks a lot guys for the trick !
nss downgrade fixes it here as well. yay. (though the breakage did help to define a disconnect in another item lol: https://bugzilla.redhat.com/show_bug.cgi?id=632452#c7)
Please refer to Bug 750376 for the analysis and fix of this problem. Marking this a duplicate. *** This bug has been marked as a duplicate of bug 750376 ***