Updating `msys` using `pacman` fails, becaus of `unable to get local issuer certificate`
Open
Nobody has claimed this yet.
bug
- Dominant language
- Shell
- Stars
- 2.7k
- Forks
- 1.4k
- Avg merge
- 11h 19m
- Merged PRs (30d)
- 562
Description
Description / Steps to reproduce the issue
Configure msys-repos, then update using pacman.
Expected behavior
Update runs without errors.
Actual behavior
Update fails exausting various lines:
:: Synchronizing package databases...
clangarm64 is up to date
mingw32 is up to date
mingw64 is up to date
ucrt64 is up to date
clang64 is up to date
msys is up to date
error: failed retrieving file 'clangarm64.db' from mirror.msys2.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
error: failed retrieving file 'mingw64.db' from mirror.msys2.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
error: failed retrieving file 'clang64.db' from mirror.msys2.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
warning: too many errors from mirror.msys2.org, skipping for the remainder of this transaction
error: failed retrieving file 'msys.db' from repo.msys2.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
error: failed retrieving file 'clang64.db' from repo.msys2.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
error: failed retrieving file 'msys.db' from ftp2.osuosl.org : SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)
:: Starting core system upgrade...
there is nothing to do
:: Starting full system upgrade...
there is nothing to do
Verification
- I have verified that my MSYS2 is up-to-date before submitting the report (see https://www.msys2.org/docs/updating/)
Windows Version
MSYS_NT-10.0-17763
MINGW environments affected
- MINGW64
- MINGW32
- UCRT64
- CLANG64
- CLANGARM64
Are you willing to submit a PR?
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Begin with the msys-repos configuration and the pacman update command described in the reproduction steps; compare the reported certificate errors across the listed repositories and environments. Done means pacman can synchronize and complete an update without the “unable to get local issuer certificate” errors.
Written by the indexing model from the issue text.
Assessment
- Domain
- cli, tooling
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100