[SOLVED] Yum install mod_passenger fails with [Errno 14] curl#35 - "TCP connection reset by peer"

Issue

I am trying to follow the Phusion Passenger installation instructions for CentOS/RHEL 7. I am encountering a problem with the HTTPS connection to the Passenger repo.

I was able to solve it for the curl request to get the repository definition by adding --tlsv1 to the request to force TLSv1. However, I haven't been able to do the same for yum, as it is still failing with the following message:

failure: repodata/repomd.xml from passenger: [Errno 256] No more mirrors to try.
https://oss-binaries.phusionpassenger.com/yum/passenger/el/7/x86_64/repodata/repomd.xml:
[Errno 14] curl#35 - "TCP connection reset by peer"

I have tried adding a .curlrc file with tlsv1, but yum doesn't appear to read that file, and continues to fail with the same error.

1. Is it possible to configure yum to always use TLSv1?
2. Are there public URLs for the RPM packages that I could download and install using curl and rpm, and bypass yum altogether?
3. Phusion Passenger devs, is there something on your repository server that could be changed to allow yum to connect? I am on CentOS 7.0.1406 with yum 3.4.3.

Updated: curl -V returns:

curl 7.29.0 (x86_64-redhat-linux-gnu) libcurl/7.29.0 NSS/3.28.4 zlib/1.2.7 libidn/1.28 libssh2/1.4.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: AsynchDNS GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz unix-sockets

Solution

The problem appears to have been an outdated nss package. Updating the nss package worked:

sudo yum install nss

After that, I was able to download the yum repo definition with curl, and install the mod_passenger package with yum.

Answered By - Peter Eichman

Answer Checked By - David Marino (WPSolving Volunteer)