Hello Pat,
With the help by an local admin, this mystery is solved by adding this entry in /etc/yum.conf:
http_caching=packages
If I understand this correctly, this entry will enable the software packages to be cached by the site web cache, but
not the metadata.
yum update now show the openssl updates.
Thanks.
Regards,
Peter
-----Original Message-----
From: Chiu, Peter (STFC,RAL,RALSP)
Sent: 08 April 2014 16:51
To: Pat Riehecky; [log in to unmask]
Cc: Chiu, Peter (STFC,RAL,RALSP)
Subject: RE: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability
Thanks, Pat,
From a web browser, I can see the updates openssl-1.0.1e-16.el6_5.7.x86_64.rpm under:
http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/
So your updates are there, but my yum installation could not reach them.
I have tried: yum clean expire-cache; yum repolist still reports the errors:
http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Trying other mirror.
http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2 [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
Trying other mirror.
I did try yum clean metadata, no joy.
I have also tried wget:
[root@geant ~]# wget http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz
--2014-04-08 16:45:08-- http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz
Resolving wwwcache.rl.ac.uk... 130.246.132.179 Connecting to wwwcache.rl.ac.uk|130.246.132.179|:8080... connected.
Proxy request sent, awaiting response... 404 Not Found
2014-04-08 16:45:08 ERROR 404: Not Found.
Any idea?
Peter
-----Original Message-----
From: Pat Riehecky [mailto:[log in to unmask]]
Sent: 08 April 2014 16:05
To: Chiu, Peter (STFC,RAL,RALSP); [log in to unmask]
Subject: Re: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability
Hmmmm.....
I'll run another fsync to make sure everything is down on disk.
Can I have you run:
yum clean expire-cache
And try another yum check-update?
Pat
On 04/08/2014 10:00 AM, [log in to unmask] wrote:
> Hello Pat,
>
> Just tried yum clean all; yum repolist; yum check-update
>
> but not show for the latest OpenSSL fixes.
> Is there a particular repository to use?
>
> Regards,
> Peter
> ====================================================
> [root@geant ~]# yum clean all; yum repolist; yum check-update Loaded
> plugins: refresh-packagekit, security Cleaning repos: atrpms elrepo
> epel rpmforge sl sl-security sl6x sl6x-security Cleaning up Everything
> Loaded plugins: refresh-packagekit, security
> atrpms | 3.5 kB 00:00
> atrpms/primary_db | 1.7 MB 00:00
> elrepo | 2.9 kB 00:00
> elrepo/primary_db | 612 kB 00:00
> epel/metalink | 25 kB 00:00
> epel | 4.4 kB 00:00
> epel/primary_db | 6.0 MB 00:00
> rpmforge | 1.9 kB 00:00
> rpmforge/primary_db | 2.7 MB 00:00
> sl | 3.6 kB 00:00
> sl/primary_db | 4.1 MB 00:00
> sl-security | 3.0 kB 00:00
> sl-security/primary_db | 1.9 MB 00:00
> http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec
> urity/repodata/primary.sqlite.z2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu
> rity/repodata/primary.sqlite.b 2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> sl-security/primary_db | 1.9 MB 00:00
> http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec
> urity/repodata/primary.sqlite. z2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu
> rity/repodata/primary.sqlite.b 2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> repo id repo name statu
> atrpms Red Hat Enterprise Linux 6.5 - x86_64 - ATrpms 2,79
> elrepo ELRepo.org Community Enterprise Linux Repository - el6 275
> epel Extra Packages for Enterprise Linux 6 - x86_64 10,681
> rpmforge RHEL 6.5 - RPMforge.net - dag 4,678
> sl Scientific Linux 6.5 - x86_64 6,524
> sl-security Scientific Linux 6.5 - x86_64 - security updates 0
> sl6x Scientific Linux 6x - x86_64 0
> sl6x-security Scientific Linux 6x - x86_64 - security updates 0
> repolist: 24,954
> Loaded plugins: refresh-packagekit, security
> sl-security/primary_db | 1.9 MB 00:00
> http://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/sec
> urity/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> http://ftp1.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.
> bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> http://ftp2.scientificlinux.org/linux/scientific/6.5/x86_64/updates/security/repodata/primary.sqlite.bz2: [Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 416 Unknown"
> Trying other mirror.
> ftp://ftp.scientificlinux.org/linux/scientific/6.5/x86_64/updates/secu
> rity/repodata/primary.sqlite.bz2: [Errno -1] Metadata file does not match checksum Trying other mirror.
> Error: failure: repodata/primary.sqlite.bz2 from sl-security: [Errno 256] No more mirrors to try.
> [root@geant ~]#
>
>
> -----Original Message-----
> From: Pat Riehecky [mailto:[log in to unmask]]
> Sent: 08 April 2014 15:10
> To: Adam Bishop; [log in to unmask]
> Subject: Re: [SCIENTIFIC-LINUX-USERS] OpenSSL Vulnerability
>
> The updated package should be available now.
>
> Pat
>
> On 04/08/2014 05:43 AM, Adam Bishop wrote:
>> Good Morning,
>>
>> I’ve not seen a fixed OpenSSL package drop into the repo’s as of yet.
>>
>> Apologies for asking the question, but how quickly will this be packaged and made available (i.e. should I start building the package myself)?
>>
>> Regards,
>>
>> Adam Bishop
>> Systems Development Specialist
>>
>> gpg: 0x6609D460
>> t: +44 (0)1235 822 245
>> xmpp: [log in to unmask]
>>
>> Janet, the UK's research and education network.
>>
>>
>> Janet(UK) is a trading name of Jisc Collections and Janet Limited, a
>> not-for-profit company which is registered in England under No.
>> 2881024 and whose Registered Office is at Lumen House, Library
>> Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No.
>> 614944238
>
> --
> Pat Riehecky
>
> Scientific Linux developer
> http://www.scientificlinux.org/
--
Pat Riehecky
Scientific Linux developer
http://www.scientificlinux.org/
|
