Fedora copr access requires now valid RH CA certs for RH users and RH hosted

Outage | 2026-10-15 05:00:00 UTC

Fedora copr’s package storage backend (packages.redhat.com) is now routed to an RH internal IP address and signed with RH CA certs, if the host is on the RH network. This can affect various use cases, for example Testing Farm’s internally built containers are unable to build because they lack the necessary RH CA certs.

Rather than sending this out widely, please if you run into this issue.

Example error from a user:

​curl error (60): SSL peer certificate or SSH remote key was not OK for https://packages.redhat.com/api/pulp-content/public-copr/@fedora-llvm-team/llvm-snapshots-big-merge-20261008/fedora-rawhide-x86_64/repodata/repomd.xml [SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)] - https://packages.redhat.com/api/pulp-content/public-copr/@fedora-llvm-team/llvm-snapshots-big-merge-20261008/fedora-rawhide-x86_64/repodata/repomd.xml

Update | 2026-10-16 18:57:00 UTC

Good news, IT will be fixing this by providing an upstrem cert for the packages.redhat.com to resolve this issue \o/