PDA

View Full Version : Unable to locally verify the issuer's authority.



plaubscher
25-Nov-2019, 08:34
To whom it may concern

I am getting the following under-mentioned error messages when I try to register new SLES 11 SP3 and SLES 15 clients on SUSE Manager 3.2. The already registered clients are all running 100%. The customer's SUSE Manager licenses did not expire.

I did recreate a new SLES 11 SP3 and SLES 15 activation key, but I am still getting the under mentioned certificate error messages.

UPDATING RHN_REGISTER/UP2DATE CONFIGURATION FILES

-------------------------------------------------

* downloading necessary files
client_config_update.py...
WARNING: cannot verify rbsuse.umhlat.co.za's certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za':

Unable to locally verify the issuer's authority.
2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/bootstrap/client_config_update.py [6478/6478] -> "client_config_update.py" [1]
FINISHED --2019-11-24 06:42:19--
Downloaded: 1 file, 6.3K in 0s (88.9 MB/s)
client-config-overrides.txt...
WARNING: cannot verify rbsuse.umhlat.co.za's certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za':
Unable to locally verify the issuer's authority.
2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/bootstrap/client-config-overrides.txt [643/643] -> "client-config-overrides.txt" [1]
FINISHED --2019-11-24 06:42:19--
Downloaded: 1 files, 643 in 0s (66.3 MB/s)

PREPARE GPG KEYS AND CORPORATE PUBLIC CA CERT
-------------------------------------------------
* no organizational GPG keys to import
* attempting to install corporate public CA cert
WARNING: cannot verify rbsuse.umhlat.co.za's certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za':
Unable to locally verify the issuer's authority.
2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm [9418/9418] -> "rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm" [1]
FINISHED --2019-11-24 06:42:19--

Downloaded: 1 files, 9.2K in 0s (98.5 MB/s)
Preparing... ##################################################
rhn-org-trusted-ssl-cert ##################################################
CLEANING UP OLD SUSE MANAGER REPOSITORIES

- When running an mgr-sync-refresh I am getting the under-mentioned error message :

rbsuse:/srv/www/htdocs/pub/bootstrap # yast
rbsuse:/srv/www/htdocs/pub/bootstrap # mgr-sync refresh
Refreshing Channels Please enter the credentials of SUSE Manager Administrator.
Login: suseadmin
Password:

[DONE]
Refreshing Channel families [DONE]
Refreshing SUSE products [DONE]
Refreshing SUSE Product channels [DONE]
Refreshing Subscriptions [FAIL]
Error: <Fault -1: 'redstone.xmlrpc.XmlRpcFault: unhandled internal exception: org.hibernate.exception.ConstraintViolationExcepti on: could not execute statement'>


May somebody pls. assist me.

plaubscher
29-Nov-2019, 08:48
I logged a SR and the suggestion was to :
change in the bootstrap scripts:

ORG_CA_CERT=rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm
ORG_CA_CERT_IS_RPM_YN=1

to

ORG_CA_CERT=RHN-ORG-TRUSTED-SSL-CERT
ORG_CA_CERT_IS_RPM_YN=0

and also note, that for SLES11SP3 you should update packages:

libopenssl0_9_8
libopenssl0_9_8-32bit
openssl
openssl-certs

plaubscher
29-Nov-2019, 08:49
Also did create new bootstrap for SLES 15 and it is working now.