yum Hangs Behind Proxy Due to SSL Inspection

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

yum stalls or fails when enterprise proxy performs TLS interception.

Environment & Reproduction

Timeouts and certificate chain errors occur during repository metadata fetch.

Root Cause Analysis

Proxy CA is missing on host, proxy URL is wrong, or firewalld blocks proxy egress path.

Quick Triage

Confirm proxy vars, test curl through proxy, and validate CA trust.

Step-by-Step Diagnosis

Run yum -v repolist, openssl s_client via proxy path, curl tests, systemctl status network service, and journalctl logs.

Solution – Primary Fix

Install proxy CA trust, correct yum proxy config, permit required egress in firewalld, and retry with clean yum metadata.

Solution – Alternative Approaches

Repository metadata downloads complete and package operations resume.

Verification & Acceptance Criteria

Revert proxy parameters if change causes wider outbound failures.

Rollback Plan

Track proxy certificate rotation and distribute trust updates proactively.

Prevention & Hardening

Validate proxy and repo reachability before maintenance windows.

Related Errors & Cross-Refs

Long-lived hosts frequently miss updated corporate trust bundles.

Related tutorial: View the step-by-step tutorial for rhel-7.

View all rhel-7 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Escalate when proxy appliance policy changes are needed.