# Linux - yum install fail due to epel issue

###### tags: `linux` `yum`

If the following fails:
  yum check-update
but,
  yum --disablerepo="epel" check-update
works, then run:
  URLGRABBER_DEBUG=1 yum check-update 2> debug.log
and check debug.log for:
  PYCURL ERROR 77 - "Problem with the SSL CA cert (path? access rights?)"
If this message is found, then try:
  yum --disablerepo="epel" reinstall ca-certificates
If that fails to resolve the issue, then backup your current CA certificate:
  cp /etc/pki/tls/certs/ca-bundle.crt /root/
and run:
  curl http://curl.haxx.se/ca/cacert.pem -o /etc/pki/tls/certs/ca-bundle.crt
  

!!! If still has problem, then edit '/etc/yum.repos.d/epel.repo' file. Modify the URLs in 'mirrorlist=' and 'baseurl=', change 'https' to 'http' and then update and try again.
Explanation

The log shows an error with your system's SSL certificates.

The CA certificate bundle on your system might have somehow become corrupt and the yum -disablerepo="epel" reinstall ca-certificates command above simply overwrites yours with a fresh version. This is unlikely to be the answer though as all other repos are working - if there were major SSL issues, then all repos would fail.

The curl... command above replaces your system's CA certificates bundle with a newer version. The CA certificates bundle contain all the root CA certificates that your system trusts.

In this instance the EPEL repo has new SSL certificates (signed by a new root CA) that your system doesn't trust. The CentOS repos continue to work with their slightly older certificates.

Ref:
https://unix.stackexchange.com/questions/148144/unable-to-pull-epel-repository-metadata/148170