Getting SSL error while running eos-update

I typically use the EOS Welcome > Update Native Packages (eos-update) to update my EOS system. But lately I am getting SSL certificate issues. Please see the Summary or eos-update log given below for more details.
How do I fix this?

SideNote: I run the Update Mirrors (Arch, reflector-simple) and chose the option rate to update arch mirrors. That is how the server nl.mirrors.cicku.me ended up in the file /etc/pacman.d/mirrorlist

Summary of eos-update log

error: failed retrieving file ‘ntp-4.2.8.p18-3-x86_64.pkg.tar.zst’ from nl.mirrors.cicku.me : SSL certificate problem: unable to get local issuer certificate
error: failed retrieving file ‘sdl3-3.2.12-1-x86_64.pkg.tar.zst’ from nl.mirrors.cicku.me : SSL certificate problem: unable to get local issuer certificate
error: failed retrieving file ‘gettext-0.24.1-1-x86_64.pkg.tar.zst’ from nl.mirrors.cicku.me : SSL certificate problem: unable to get local issuer certificate
warning: too many errors from nl.mirrors.cicku.me, skipping for the remainder of this transaction

1 Like

Well I always use delay as an option instead of rate , if that doesn’t help just remove or comment out the server that is given you problems.

1 Like

It is one of the fastest servers in Europe for updates. And especially in the Benelux region.

You said it one of the fastest, but if there are problems with it who cares , plenty more fish in the sea.
For good measure this is my mirrorlist including the mirror you have problems with.

################################################################################
################# Arch Linux mirrorlist generated by Reflector #################
################################################################################
# With:       reflector --verbose -c BE -c DE -c NL --protocol https --sort delay --latest 20 --download-timeout 5
# When:       2025-05-06 06:19:34 UTC
# From:       https://archlinux.org/mirrors/status/json/
# Retrieved:  2025-05-06 06:18:44 UTC
# Last Check: 2025-05-06 05:29:21 UTC

## Germany
Server = https://mirror.pseudoform.org/$repo/os/$arch

## Germany
Server = https://mirror.moson.org/arch/$repo/os/$arch

## Germany
Server = https://de.arch.mirror.kescher.at/$repo/os/$arch

## Germany
Server = https://de.arch.niranjan.co/$repo/os/$arch

## Germany
Server = https://mirror.kumi.systems/archlinux/$repo/os/$arch

## Germany
Server = https://berlin.mirror.pkgbuild.com/$repo/os/$arch

## Netherlands
Server = https://nl.arch.niranjan.co/$repo/os/$arch

## Germany
Server = https://archlinux.thaller.ws/$repo/os/$arch

## Germany
Server = https://arch.jensgutermuth.de/$repo/os/$arch

## Germany
Server = https://mirror.lcarilla.de/archlinux/$repo/os/$arch

## Germany
Server = https://mirror.ubrco.de/archlinux/$repo/os/$arch

## Germany
Server = https://packages.oth-regensburg.de/archlinux/$repo/os/$arch

## Germany
Server = https://mirror.hugo-betrugo.de/archlinux/$repo/os/$arch

## Germany
Server = https://pkg.fef.moe/archlinux/$repo/os/$arch

## Germany
Server = https://mirrors.niyawe.de/archlinux/$repo/os/$arch

## Netherlands
Server = https://nl.mirrors.cicku.me/archlinux/$repo/os/$arch

## Germany
Server = https://de.mirrors.cicku.me/archlinux/$repo/os/$arch

## Germany
Server = https://mirrors.n-ix.net/archlinux/$repo/os/$arch

## Netherlands
Server = https://mirror.ams1.nl.leaseweb.net/archlinux/$repo/os/$arch

## Germany
Server = https://mirror.fra10.de.leaseweb.net/archlinux/$repo/os/$arch

## Worldwide
Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch
Server = https://ftpmirror.infania.net/mirror/archlinux/$repo/os/$arch
Server = https://mirror.rackspace.com/archlinux/$repo/os/$arch

You can ignore it, it doesn’t affect your system.
The SSL (security) certificate of that website has expired; usually, it renews itself automatically, but something went wrong. The mirror admin of that server will receive a notification for it, so it will solve itself soon.
You can also email the mirror admin to be sure they receive the notification.

1 Like

This was taken from the website of the mirror.

Announcements:
1. Cache backend is being redesigned, you may experience occasional failure/slowness.

2. The next scheduled maintenance is set on 05/09/2025 2100UTC.
2 Likes

You can temporarily comment out (add a # character in the beginning of that line) that cicku.me mirror in file /etc/pacman.d/mirrorlist.

You can also check the status of the mirrors on this page.

1 Like

What is the difference between delay and rate? In the sort by the following options are available

  1. age
  2. rate
  3. country
  4. score
  5. delay

Just use this command and all will be revealed.

reflector --help

From the command reflector --help the following is the text that I get

"delay": MirrorStatus delay.

What is MirrorStatus delay? Does this mean the time the mirror takes to sync with the other main Arch servers? Or does it mean something else?