one of the configured repocitories failed (sbalinux)

[zhangchuang]

Hello fellow Check Mates,

 I have a problem and need help urgently. When I install the endpoint to Linux, the following error will appear when I execute the installation script:

one of the configured repocitories failed (sbalinux)…………

failure: repodata/repomd.xml from sbalinux: (Errno 256] No more mirrors to try https://securcupdates.checkpoint .com/sbalinux/packages/rpm/prod/centos_7/repodata/repomd.xml: [Errno 14] curl#22 "The requested URL returned error : 400"

However, I tested the URL through PING and CURL, and the connectivity between my host and the URL was no problem.

I wonder if anyone has ever encountered a similar situation. The version of linux is CentOS 7.9

[_Val_]

Which Check Point product is installed on that Linux machine? Does it have access to Internet? Can you try a manual access from that machine to the specified URL? What do you see when you try?

[zhangchuang]

Hi _val_,

The product installed on Linux is the Anti Malware blade of Harmony Endpoint. Linux itself can access the Internet, and ping secureupdates.checkpoint.com can access it. The test results using CURL - V are as follows:

[root@localhost ~]# curl -v https://secureupdates.checkpoint.com/sbalinux/packages/rpm/prod/centos_7/repodata/repomd.xml
* About to connect() to secureupdates.checkpoint.com port 443 (#0)
* Trying 104.65.229.210...
* Connected to secureupdates.checkpoint.com (104.65.229.210) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* subject: CN=*.checkpoint.com
* start date: Dec 07 13:19:55 2021 GMT
* expire date: Jan 08 13:19:55 2023 GMT
* common name: *.checkpoint.com
* issuer: CN=GlobalSign GCC R3 DV TLS CA 2020,O=GlobalSign nv-sa,C=BE
> GET /sbalinux/packages/rpm/prod/centos_7/repodata/repomd.xml HTTP/1.1
> User-Agent: curl/7.29.0
> Host: secureupdates.checkpoint.com
> Accept: */*
>
< HTTP/1.1 200 OK
< Accept-Ranges: bytes
< Content-Type: application/xml
< ETag: "a492c81593180a7fe3146cb76e3e2693:1672080014.42985"
< Last-Modified: Mon, 26 Dec 2022 17:54:46 GMT
< Server: AkamaiNetStorage
< Content-Length: 971
< Date: Thu, 29 Dec 2022 12:12:54 GMT
< Connection: keep-alive
<
<?xml version="1.0"?>
<repomd xmlns="http://linux.duke.edu/metadata/repo" xmlns:rpm="http://linux.duke.edu/metadata/rpm">
<data type="other">
<location href="repodata/23c1405814d8bf4ce113c368fbd112d040b86ac8-other.xml.gz"/>
<checksum type="sha" pkgid="YES">23c1405814d8bf4ce113c368fbd112d040b86ac8</checksum>
<size>450766</size>
<timestamp>1672077286</timestamp>
<open-checksum type="sha" pkgid="YES">c1c63f34b623490be651bc3f7aa68b9694fe4328</open-checksum>
<open-size>1979605</open-size>
<revision/>
</data>
<data type="primary">
<location href="repodata/79c848d03da67208d14a73d8d56fc6dd4e16633b-primary.xml.gz"/>
<checksum type="sha" pkgid="YES">79c848d03da67208d14a73d8d56fc6dd4e16633b</checksum>
<size>22765</size>
<timestamp>1672077286</timestamp>
<open-checksum type="sha" pkgid="YES">d53d85146d4879c0c4a675694f07879330b4198e</open-checksum>
<open-size>320487</open-size>
<revision/>
</data>
* Connection #0 to host secureupdates.checkpoint.com left intact

[_Val_]

Thanks for the elaborate details. Please open a support request with TAC

[Chris_Atkinson]

Which endpoint version is installed?

If the issue is truly "urgent" please contact TAC directly to expedite resolution with an official SR.

[zhangchuang]

Hi Chris_Atkinson,

Preparing to install CPLA version: 0.0.822, but the installation failed.