Re: [IBMiOSS] yum using http instead of ftp?

There are no CA certificates shipped with any of our products, so it
doesn't know it can be trusted. This is something else we'd like to fix,
but for now I have a script that adds various CA certificates to the
trust
store:
[1]https://gist.github.com/kadler/547bb36ddadb9bfec3ff9c16a164a1
48#gistcomment-2389108



----- Original message -----
From: David Gibbs <david@xxxxxxxxxxxx>
Sent by: "OpenSource" <opensource-bounces@xxxxxxxxxxxx>
To: IBMi Open Source Roundtable <opensource@xxxxxxxxxxxx>
Cc:
Subject: Re: [IBMiOSS] yum using http instead of ftp?
Date: Mon, Jul 2, 2018 2:21 PM

On 7/2/2018 1:25 PM, Kevin Adler wrote:
> Our IBM repository hosting only supports FTP at the moment, but
> we're working on getting HTTP support enabled.
>
> In the meantime, you can host your own HTTP mirror or sync the
> repository it to the IFS using plugin in the latest ACS. Of course,
> this assumes that your workstation can access FTP.

OK, I'm going to try an experiment.

I've setup a mirror of the ftp site on my own server
(yum-mirror.midrange.com).

Just change the ibm.repo to look like this:

[ibm]
name=ibm
baseurl=http://yum-mirror.midrange.com/software/ibmi/
products/pase/rpms/repo
enabled=1
gpgcheck=0

Interestingly, yum doesn't like my letsencrypt certificate.

/qopensys/pkgs/bin/yum list
[2]https://yum-mirror.midrange.com/software/ibmi/
products/pase/rpms/repo/repodata/repomd.xml [Errno
14] curl#60 - "SSL certificate
problem: unable to get local issuer certificate"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for
repository:
ibm. Please verify its path and try again

It works fine with the non ssl url.

I've got a cron job running that will update the mirror daily.

david

--
David Gibbs
midrange.com

IBM i on Power Systems: For when you can't afford to be out of
business!

I'm riding 615 miles (Yes, you read that right) in the American
Diabetes
Association's Tour de Cure to raise money for diabetes research,
education, advocacy, and awareness. You can make a tax deductible
donation to my ride by visiting [3]https://lsteml.diabetessucks.net.

See where I get my donations from ... visit
[4]https://lsteml.diabetessucks.net/map for an interactive map (it's
a
geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: [5]https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at [6]https://archive.midrange.com/opensource.




References

Visible links
1. https://gist.github.com/kadler/547bb36ddadb9bfec3ff9c16a164a1
48#gistcomment-2389108
2. https://yum-mirror.midrange.com/software/ibmi/products/
pase/rpms/repo/repodata/repomd.xml
3. https://lsteml.diabetessucks.net/
4. https://lsteml.diabetessucks.net/map
5. https://lists.midrange.com/mailman/listinfo/opensource
6. https://archive.midrange.com/opensource
--
This is the IBMi Open Source Roundtable (OpenSource) mailing list
To post a message email: OpenSource@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/opensource
or email: OpenSource-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/opensource.