Peer certificate cannot be authenticated with given CA certificates&&EE certificate key too weak 问题解决记录

[root@localhost tools]# yum makecache

CentOS-8 - Extras                                                                                                                                                              0.0  B/s |   0  B     00:00

Errors during downloading metadata for repository 'extras':

  - Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://mirrors.com.cn/centos/8-stream/AppStream/x86_64/os/repodata/repomd.xml [SSL certificate problem: EE certificate key too weak]

错误：Failed to download metadata for repo 'extras': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

[root@localhost tools]# cd /etc/yum.repos.d/

[root@localhost yum.repos.d]# date

2022年 09月 20日 星期二 19:06:10 CST

[root@localhost chrony]# date -s 11:14:59

2022年 09月 20日 星期二 11:14:59 CST

[root@localhost chrony]# date

2022年 09月 20日 星期二 11:15:05 CST

[root@localhost chrony]# update-crypto-policies --show

FUTURE

[root@localhost chrony]# update-crypto-policies --set LEGACY

Setting system policy to LEGACY

Note: System-wide crypto policies are applied on application start-up.

It is recommended to restart the system for the change of policies

to fully take place.

[root@localhost chrony]# yum makecache

CentOS-8 - Extras                                                                                                                                                              2.0 MB/s |  25 MB     00:12

CentOS-8 - Base                                                                                                                                                                2.9 MB/s |  25 MB     00:08

上次元数据过期检查：0:00:11 前，执行于 2022年09月20日 星期二 11时29分05秒。

元数据缓存已建立。