Can't update, "failed retrieving file 'chaotic-aur.db' from kr-mirror.chaotic.cx"

Hey i am running this command pacman -Syu but getting this error

error: failed retrieving file 'chaotic-aur.db' from kr-mirror.chaotic.cx : SSL certificate problem: certificate has expired
error: failed to update chaotic-aur (download library error)
error: failed to synchronize all databases

I haven't done any updates or stuff to pacman 6

Just now I upded successfully!

I am still getting the error

Tried this?

Wdym pacman -upd this?

No, just upd. That's the best way to update your system as it refreshes mirrors first and does lot more:

alias | grep "alias upd"

same thing getting this errors on start

[2021-06-02 11:54:10] WARNING: failed to rate http(s) download (https://archmirror.it/repos/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2021-06-02 11:54:16] WARNING: failed to rate http(s) download (https://archlinux.thaller.ws/community/os/x86_64/community.db): Download timed out after 5 second(s).
[2021-06-02 11:54:22] WARNING: failed to rate http(s) download (https://archlinux.mailtunnel.eu/community/os/x86_64/community.db): Download timed out after 5 second(s).

then the same error again

Have you checked your internet connection? Is it working in that device? Also, maybe you should reboot and try again.

I am posting from that same device.

On the upd you got only warnings, maybe the mirrorlists were updated and you can sudo pacman -Syu
Edit:
Check also this hint
https://bbs.archlinux.org/viewtopic.php?id=262621
I guess It could be something like

sudo reflector -a6 -f5 --download-timeout 60 --save /etc/pacman.d/mirrorlist
3 Likes

Post full terminal in and output from

upd

that only warning from 3 down/offline mirrors.

3 Likes

We pinged the Korean mirror's maintainer about it.
Meanwhile, we disabled HTTPS in that specific mirror redirection.

  • Isn't that a security hole? Nope, all packages are signed with Pedro and Nico's keys, which's equivalent to asserting the binary comes from Chaotic.

  • Won't my ISP/MitM see what I'm downloading? It already does: 1. (non-DoH) DNS is already showing that to them; 2. pacman does not supports encrypted SNI which means it will also show that to them.

6 Likes

The Korean mirror's maintainer renewed his certificate.

6 Likes