[Spacewalk-list] RHNS-CA-CERT has expired

Daryl Rose rosede12 at gmail.com
Tue Nov 4 20:05:56 UTC 2014


Ethan,

/etc/sysconfig/rhn/up2date was originally pointing
to /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT, but I dont' have
a RHN-ORG-TRUSTED-SSL-CERT.  I a little searching and the resolution for
that error was to modify up2date to point to /usr/share/rhn/RHNS-CA-CERT.

Where would I get RHN-ORG-TRUSTED-SSL-CERT?

Thanks

Daryl



On Tue, Nov 4, 2014 at 1:53 PM, Ethan Bonick <ethan.bonick at truqua.com>
wrote:

> I had that error before and I had to update /etc/sysconfig/rhn/up2date to
> point to my /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT. I assume you've
> downloaded your SSL cert to /usr/share/rhn?
>
> I am running into a different ssl issue after joining my test client to a
> different spacewalk server.
>
> 2014-11-04 13:44:47 jabber_lib.connect: Preparing for TLS handshake
> Traceback caught:
> Traceback (most recent call last):
>   File "/usr/share/rhn/osad/jabber_lib.py", line 631, in connect
>     ssl.do_handshake()
> Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate
> verify failed')]
>
>    Ethan Bonick | Information Technology
>
> *TruQua M 630.445.9313*
> *O **312.525.8790*
>
> *CONFIDENTIAL:  This e-mail and any attachments are confidential and may
> be protected by legal privilege. If you are not the intended recipient, be
> aware that any disclosure, copying, distribution or use of this e-mail or
> any attachment is prohibited. If you have received this e-mail in error,
> please reply and notify the sender and delete this copy from your system.*
>
>
> On Tue, Nov 4, 2014 at 11:16 AM, Daryl Rose <rosede12 at gmail.com> wrote:
>
>> I'm standing up a Spacewalk 2.2 server on CentOS 6.6 and the client
>> server that I am working is also CentOS 6.6.
>>
>> I've made it all the way to registering the client to the Spacewalk
>> server. However, I get the following error:
>>
>> An error has occurred:
>>> The certificate /usr/share/rhn/RHNS-CA-CERT is expired. Please ensure
>>> you have the correct certificate and your system time is correct.
>>
>>
>> If you look at the cert, you can see that it in fact expired August 26,
>> 2013.
>>
>> Where can a person get an updated certificate?
>>
>> Thank you
>>
>> Daryl
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20141104/fc7f95c2/attachment.htm>


More information about the Spacewalk-list mailing list