RHEL 7 – Yum Hangs Behind Proxy with SSL Inspection

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

yum commands stall or fail TLS checks, blocking package updates and compliance operations.

Environment & Reproduction

Seen in corporate networks with authenticated proxy and SSL inspection enabled.

Root Cause Analysis

Proxy CA certificate is not trusted on host, causing yum HTTPS handshake failures.

Quick Triage

Test curl against repo URL, inspect yum.conf proxy settings, and review journalctl networking logs.

Step-by-Step Diagnosis

Validate proxy credentials, CA trust chain, and reachable whitelist endpoints.

Solution – Primary Fix

Install proxy CA into trust store, set yum proxy options correctly, and retry update.

Solution – Alternative Approaches

Use internal mirrored repos to avoid outbound SSL inspection path entirely.

Verification & Acceptance Criteria

yum repolist and yum update complete without timeout or SSL verify errors.

Rollback Plan

Restore previous yum.conf and trust store if new cert chain causes broader failures.

Prevention & Hardening

Document proxy trust requirements in baseline builds and monitor certificate expiry.

Related Errors & Cross-Refs

SSL peer certificate cannot be authenticated, curl#35, proxy timeout.

Related tutorial: View the step-by-step tutorial for rhel-7.

View all rhel-7 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

RHEL 7 yum proxy configuration and certificate trust guidance.