Actions in case of problems with TLS/SSL certificates on VEOS

In case you have a problem with installing packages on the server and you see an error like this:

- Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://repo.vasexperts.com/veos/8/BaseOS/x86_64/os/repodata/repomd.xml [SSL certificate problem: certificate has expired]Error: Failed to download metadata for repo «baseos»: Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

You need to check the date and time on the server/in the bios. The date and time must be up to date.

Verify that the root TLS certificate is not being spoofed:

openssl s_client -connect abcdef.com:443

Check firewall settings — port 443 should be open.

Disable sslverify in /etc/dnf.conf (the line sslverify=0 should be added).

Disabling sslverify is an extreme and unrecommended measure that only disables certificate verification when installing packages, while other utilities (like curl) will not work.