AWS RHEL5でyumがエラーを吐きまくり

とあるソフトのインストール中、最初にwgetが足りないとエラーが出た。
yumでインストールしようとしたら、エラーが出て、作業中断。。。解決まで時間が掛かってしまったのでメモ。

# yum list

Loaded plugins: amazon-id, fastestmirror, security

Loading mirror speeds from cached hostfile

Traceback (most recent call last):

  File "/usr/bin/yum", line 29, in ?

    yummain.user_main(sys.argv[1:], exit_code=True)

  File "/usr/share/yum-cli/yummain.py", line 309, in user_main

    errcode = main(args)

  File "/usr/share/yum-cli/yummain.py", line 178, in main

    result, resultmsgs = base.doCommands()

  File "/usr/share/yum-cli/cli.py", line 345, in doCommands

    self._getTs(needTsRemove)

  File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 101, in _getTs

    self._getTsInfo(remove_only)

  File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 112, in _getTsInfo

    pkgSack = self.pkgSack

  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 662, in 

    pkgSack = property(fget=lambda self: self._getSacks(),

  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 502, in _getSacks

    self.repos.populateSack(which=repos)

  File "/usr/lib/python2.4/site-packages/yum/repos.py", line 260, in populateSack

    sack.populate(repo, mdtype, callback, cacheonly)

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 168, in populate

    if self._check_db_version(repo, mydbtype):

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 226, in _check_db_version

    return repo._check_db_version(mdtype)

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1233, in _check_db_version

    repoXML = self.repoXML

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1406, in 

    repoXML = property(fget=lambda self: self._getRepoXML(),

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1398, in _getRepoXML

    self._loadRepoXML(text=self)

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1388, in _loadRepoXML

    return self._groupLoadRepoXML(text, ["primary"])

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1372, in _groupLoadRepoXML

    if self._commonLoadRepoXML(text):

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 1208, in _commonLoadRepoXML

    result = self._getFileRepoXML(local, text)

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 989, in _getFileRepoXML

    cache=self.http_caching == 'all')

  File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 826, in _getFile

    http_headers=headers,

  File "/usr/lib/python2.4/site-packages/urlgrabber/mirror.py", line 412, in urlgrab

    return self._mirror_try(func, url, kw)

  File "/usr/lib/python2.4/site-packages/urlgrabber/mirror.py", line 398, in _mirror_try

    return func_ref( *(fullurl,), **kwargs )

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 936, in urlgrab

    return self._retry(opts, retryfunc, url, filename)

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 854, in _retry

    r = apply(func, (opts,) + args, {})

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 922, in retryfunc

    fo = URLGrabberFileObject(url, filename, opts)

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 1010, in __init__

    self._do_open()

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 1093, in _do_open

    fo, hdr = self._make_request(req, opener)

  File "/usr/lib/python2.4/site-packages/urlgrabber/grabber.py", line 1202, in _make_request

    fo = opener.open(req)

  File "/usr/lib/python2.4/urllib2.py", line 358, in open

    response = self._open(req, data)

  File "/usr/lib/python2.4/urllib2.py", line 376, in _open

    '_open', req)

  File "/usr/lib/python2.4/urllib2.py", line 337, in _call_chain

    result = func(*args)

  File "/usr/lib/python2.4/site-packages/M2Crypto/m2urllib2.py", line 82, in https_open

    h.request(req.get_method(), req.get_selector(), req.data, headers)

  File "/usr/lib/python2.4/httplib.py", line 810, in request

    self._send_request(method, url, body, headers)

  File "/usr/lib/python2.4/httplib.py", line 833, in _send_request

    self.endheaders()

  File "/usr/lib/python2.4/httplib.py", line 804, in endheaders

    self._send_output()

  File "/usr/lib/python2.4/httplib.py", line 685, in _send_output

    self.send(msg)

  File "/usr/lib/python2.4/httplib.py", line 652, in send

    self.connect()

  File "/usr/lib/python2.4/site-packages/M2Crypto/httpslib.py", line 47, in connect

    self.sock.connect ( (self.host, self.port) )

  File "/usr/lib/python2.4/site-packages/M2Crypto/SSL/Connection.py", line 174, in connect

    ret = self.connect_ssl()

  File "/usr/lib/python2.4/site-packages/M2Crypto/SSL/Connection.py", line 167, in connect_ssl

    return m2.ssl_connect(self.ssl, self._timeout)

M2Crypto.SSL.SSLError: certificate verify failed

# yum clean all

でも解決せず。色々探したところ、AWSのフォーラムに辿り着いた。
https://forums.aws.amazon.com/thread.jspa?threadID=76738
現在のインスタンスは東京リージョンで稼働中なので、ここを参考にした。

For customers in AP-Northeast:

RHEL5: rpm -Uhv http://redhat-clientconfig-ap-northeast-1.s3.amazonaws.com/rh-amazon-rhui-client-2.2.16-1.el5.noarch.rpm

rpmをインストール後、再度clean allを実行したところ、無事、接続できるようになった！

当初の検索時、2009年とか数年前の情報ばかりヒットして、今回の件に当てはまらない解決策ばかりだった。
その後思い立って、1年以内のページで検索し直したところ、唯一ヒットしたページで無事解決した。
検索の仕方も重要だね。