anaconda install failswith SSL: DH_KEY_TOO_SMALL

Solution In Progress - Updated -

Issue

  • RHEL 8 anaconda install fails with following in packaging.log despite using inst.nosslverify on kernel command line

    ERR dnf: Failed to download metadata for repo 'anaconda'
    ERR packaging: base repo (url/https://hostname.example.com/baseos/) not valid -- removing it
    ERR packaging: reason for repo removal: Failed to download metadata for repo 'anaconda'
    ERR packaging: Repo info download for https://hostname.example.com/baseos/ failed after 6 retries
    INF packaging: Error downloading '.treeinfo': HTTPSConnectionPool(host='hostname.example.com', port=443):
                   Max retries exceeded with url: /baseos/.treeinfo
                  (Caused by SSLError(SSLError(1, '[SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:897)'),))
    INF packaging: Error downloading 'treeinfo': HTTPSConnectionPool(host='hostname.example.com', port=443):
                   Max retries exceeded with url: /baseos//treeinfo
                   (Caused by SSLError(SSLError(1, '[SSL: DH_KEY_TOO_SMALL] dh key too small (_ssl.c:897)'),))
    

Environment

  • Red Hat Enterprise Linux (RHEL) 8

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content