Unable to download httpd updates

[JMMike]

Hi all,

I am unable to download any updates for Apache in particular, on one of our CentOS 7 boxes. Note that no other packages seem to be affected.
I am presented with the following error message:

Code: Select all

httpd-2.4.6-99.el7.centos.1.x8 FAILED
http://mirror.ventraip.net.au/centos/7.9.2009/updates/x86_64/Packages/httpd-2.4.6-99.el7.centos.1.x86_64.rpm: [Errno 14] HTTP Error 500 - Internal Server Error                                                                                       ]  0.0 B/s |    0 B  --:--:-- ETA
Trying other mirror.
.... and so on ....
 

Things I have tried:

• Verified our local and upstream (at least to the ISP) network isn't blocked or filtered. We are not using any proxy.

• Ran the following commands:

Code: Select all

 rm -fr /var/cache/yum/*
 yum clean all
 yum makecache
 yum --disablerepo=\* --enablerepo=base,extras,updates update

I'd be grateful for anyone's insight here. I also considered trying to proxy the traffic via my local machine (for testing) but was never able to get that to work.
-Mike.

Additional diagnostic information:

cat /etc/os-release
NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

Linux redacted 3.10.0-1160.90.1.el7.x86_64 #1 SMP Thu May 4 15:21:22 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

# ll /etc/yum.repos.d/
total 56
-rw-r--r--. 1 root root 1664 Apr 26 17:04 CentOS-Base.repo
-rw-r--r--. 1 root root 1664 Apr 24 18:56 CentOS-Base.repo.bac
-rw-r--r--. 1 root root 1309 Nov 24 2020 CentOS-CR.repo
-rw-r--r--. 1 root root 649 Nov 24 2020 CentOS-Debuginfo.repo
-rw-r--r--. 1 root root 314 Nov 24 2020 CentOS-fasttrack.repo
-rw-r--r--. 1 root root 630 Nov 24 2020 CentOS-Media.repo
-rw-r--r--. 1 root root 1331 Nov 24 2020 CentOS-Sources.repo
-rw-r--r--. 1 root root 8515 Nov 24 2020 CentOS-Vault.repo
-rw-r--r--. 1 root root 616 Nov 24 2020 CentOS-x86_64-kernel.repo
-rw-r--r--. 1 root root 293 Nov 13 2020 datto-rpm-repo-el.repo
-rw-r--r--. 1 root root 1358 Sep 5 2021 epel.repo
-rw-r--r--. 1 root root 1457 Sep 5 2021 epel-testing.repo

cat /etc/yum.conf
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
gpgcheck=1
plugins=1
installonly_limit=5
bugtracker_url=http://bugs.centos.org/set_project.php? ... tegory=yum
distroverpkg=centos-release
# PUT YOUR REPOS HERE OR IN separate files named file.repo
# in /etc/yum.repos.d
timeout = 500.0
minrate = 1

[TrevorH]

Well the good news is that I can pull the package using curl & wget from http://mirror.ventraip.net.au/centos/7. ... x86_64.rpm

Can you do that from the machine in question and if not does it give any better error messages?

Any output from rpm -Va \*curl\* yum\* python\*

[tunk]

Don't know what your httpd problem is, but your kernel is out of date.

[JMMike]

TL;DR - Resolved

Well the good news is that I can pull the package using curl & wget from http://mirror.ventraip.net.au/centos/7. ... x86_64.rpm

Can you do that from the machine in question and if not does it give any better error messages?

Any output from rpm -Va \*curl\* yum\* python\*

Thanks for the reply. I tried as you suggested:

Code: Select all

~]# wget http://mirror.ventraip.net.au/centos/7.9.2009/updates/x86_64/Packages/httpd-2.4.6-99.el7.centos.1.x86_64.rpm
--2023-09-01 11:12:10--  http://mirror.ventraip.net.au/centos/7.9.2009/updates/x86_64/Packages/httpd-2.4.6-99.el7.centos.1.x86_64.rpm
Resolving mirror.ventraip.net.au (mirror.ventraip.net.au)... 103.42.108.205, 2400:b800:2:1::222
Connecting to mirror.ventraip.net.au (mirror.ventraip.net.au)|103.42.108.205|:80... connected.
HTTP request sent, awaiting response... 500 Internal Server Error
2023-09-01 11:12:30 ERROR 500: Internal Server Error.

Code: Select all

~]# rpm -Va \*curl\* yum\* python\*
S.5....T.  c /etc/yum/yum-cron.conf
S.5....T.  c /etc/yum.conf
.......T.  c /etc/yum/pluginconf.d/fastestmirror.conf

It feels like its that package in particular. I can pull other packages from that mirror from the affected box:

Code: Select all

 ~]# wget http://mirror.ventraip.net.au/centos/7.9.2009/updates/x86_64/Packages/ImageMagick-6.9.10.68-4.el7.i686.rpm
--2023-09-01 11:17:46--  http://mirror.ventraip.net.au/centos/7.9.2009/updates/x86_64/Packages/ImageMagick-6.9.10.68-4.el7.i686.rpm
Resolving mirror.ventraip.net.au (mirror.ventraip.net.au)... 103.42.108.205, 2400:b800:2:1::222
Connecting to mirror.ventraip.net.au (mirror.ventraip.net.au)|103.42.108.205|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2380624 (2.3M) [application/x-redhat-package-manager]
Saving to: ‘ImageMagick-6.9.10.68-4.el7.i686.rpm’

100%[============================================================================================================================>] 2,380,624   --.-K/s   in 0.02s

2023-09-01 11:17:47 (109 MB/s) - ‘ImageMagick-6.9.10.68-4.el7.i686.rpm’ saved [2380624/2380624]

You pointed me in the right direction with curl, and using the -v flag I noted the output was......surprise surprise......being filtered by an upstream Sophos antivirus appliance that the IT team on site swore up and down didn't exist in our previous phone call I'm now getting them to try and give our VM an exclusion.

switch (reason) {
case 'av_unscannable':
headerText = 'Security risk detected';
descText = 'Access to the website you are requesting has been blocked because it is a security risk.';
reasonText = 'The requested content could not be scanned for malware. It may be corrupted or encrypted.';
break;

<div class='logoSophosFooter'>
<div class='logoSophosFooterText'>
<span class='logoSophosFooterFont'>Protected by</span>

I think we can mark this one solved for now. Thanks for the opportunity to bounce this off someone, looks like I need to go back to troubleshooting bootcamp.

Don't know what your httpd problem is, but your kernel is out of date.

I'm aware of that, respectfully I'd suggest unless it's related to my package difficulties, this kind of reply isn't particularly helpful.


Cheers,
Mike.