Curl error (60): Peer certificate cannot be authenticated with given CA certificates for [SSL certificate problem: unable to get local issuer certificate]

Issue

yum operations result in the error below

# yum makecache
This system is receiving updates from CloudLinux Network server.
[...]
Errors during downloading metadata for repository 'cloudlinux-x86_64-server-8':
- Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://release.swng.cloudlinux.com/ [SSL certificate problem: unable to get local issuer certificate]
Error: Failed to download metadata for repo 'cloudlinux-x86_64-server-8': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Environment

• CloudLinux OS

Solution

1. Check if mirrorURL in '/etc/sysconfig/rhn/up2date' did not point to some custom location like 'mirrorURL=file:///etc/mirrorlist'

   # grep -Ei "serverURL=|mirrorURL=|clnServerURL=" /etc/sysconfig/rhn/up2date
   
   serverURL=https://xmlrpc.cln.cloudlinux.com/XMLRPC/
   mirrorURL=https://repo.cloudlinux.com/cloudlinux/mirrorlists/cln-mirrors
   clnServerURL=http://cln.cloudlinux.com/clweb/xmlrpc
   mirrorURL=file:///etc/mirrorlist

2. Remove the entry or point it to official CloudLinux mirror list
   

   mirrorURL=https://repo.cloudlinux.com/cloudlinux/mirrorlists/cln-mirrors

   
   

3. Regenerate yum cache:

   yum clean all
   yum makecache

Cause

Incorrect mirrorURL entries in /etc/sysconfig/rhn/up2date