YUM：[Errno 14] problem making ssl connection

有时候在使用YUM的时候，你会出现如题所示的问题，具体如下：

[root@mha1 c++]# yum install -y glib2-devel libpcap-devel libnet-devel
Loaded plugins: fastestmirror, refresh-packagekit, security
Determining fastest mirrors
 * extras: mirrors.163.com
 * remi-safe: mirrors.thzhost.com
 * updates: mirrors.aliyun.com
LocalPercona                                                                                                               | 2.9 kB     00:00 ... 
LocalPercona/primary_db                                                                                                    |  16 kB     00:00 ... 
http://download.fedoraproject.org/pub/epel/6/x86_64/repodata/repomd.xml: [Errno 14] problem making ssl connection
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again
[root@mha1 c++]# 

对于该问题，需要首先禁用出问题的YUM源（enabled=0），然后安装ca-certificates包：
yum install ca-certificates

可以看到，上面出问题的是EPEL源。

先禁用：

[root@mha1 ~]# cat /etc/yum.repos.d/epel.repo 
[epel]
name=Extra Packages for Enterprise Linux 6 - $basearch
baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-6&arch=$basearch
failovermethod=priority
enabled=0
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 6 - $basearch - Debug
baseurl=http://download.fedoraproject.org/pub/epel/6/$basearch/debug
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-6&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
gpgcheck=0

[epel-source]
name=Extra Packages for Enterprise Linux 6 - $basearch - Source
baseurl=http://download.fedoraproject.org/pub/epel/6/SRPMS
#mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-source-6&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
gpgcheck=0
[root@mha1 ~]# 

然后，安装软件包：

[root@mha1 ~]# yum install ca-certificates
Loaded plugins: fastestmirror, refresh-packagekit, security
Loading mirror speeds from cached hostfile
 * base: mirrors.btte.net
 * extras: mirrors.163.com
 * remi-safe: mirrors.tuna.tsinghua.edu.cn
 * updates: mirrors.aliyun.com
extras                                                                                                                     | 3.4 kB     00:00     
updates                                                                                                                    | 3.4 kB     00:00     
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package ca-certificates.noarch 0:2010.63-3.el6_1.5 will be updated
---> Package ca-certificates.noarch 0:2015.2.6-65.0.1.el6_7 will be an update
--> Processing Dependency: p11-kit-trust >= 0.18.4-2 for package: ca-certificates-2015.2.6-65.0.1.el6_7.noarch
--> Processing Dependency: p11-kit >= 0.18.4-2 for package: ca-certificates-2015.2.6-65.0.1.el6_7.noarch
--> Running transaction check
---> Package p11-kit.x86_64 0:0.18.5-2.el6_5.2 will be installed
---> Package p11-kit-trust.x86_64 0:0.18.5-2.el6_5.2 will be installed
--> Processing Conflict: p11-kit-trust-0.18.5-2.el6_5.2.x86_64 conflicts nss < 3.14.3-33
--> Restarting Dependency Resolution with new changes.
--> Running transaction check
---> Package nss.x86_64 0:3.13.3-6.el6 will be updated
--> Processing Dependency: nss = 3.13.3-6.el6 for package: nss-tools-3.13.3-6.el6.x86_64
--> Processing Dependency: nss = 3.13.3-6.el6 for package: nss-sysinit-3.13.3-6.el6.x86_64
---> Package nss.x86_64 0:3.21.3-2.el6_8 will be an update
--> Processing Dependency: nss-util >= 3.21.0 for package: nss-3.21.3-2.el6_8.x86_64
--> Processing Dependency: nss-softokn(x86-64) >= 3.14.3-22 for package: nss-3.21.3-2.el6_8.x86_64
--> Processing Dependency: nspr >= 4.11.0 for package: nss-3.21.3-2.el6_8.x86_64
--> Processing Dependency: libnssutil3.so(NSSUTIL_3.21)(