[Spacewalk-list] SSL Error SLES11 SP1 SP2 SP3

[Michael Calmer]

Hi,

Am Sonntag, 8. Februar 2015, 15:02:32 schrieb Bernd Helber:
> Hello List,
> 
> we installed a Spacewalk 2.2 Server for central Patchmanagement and
> Kickstart Rollouts. Most Things worked flawlessly.
> 
> But currently we face an annoying problem with the Spacewalk Clients
> for Sles11 SP2, SP3 and also SP1
> 
> From Time to time we see Problems  with the SSL Handshake between the
> Sles Clients and the Spacewalk Server
>  Error message: SSL certificate problem, verify that the CA cert is
> OK. Details:

Well, on SSL problems the first thing I would check is, if date and time of 
the client is set correct.
 
[...]
> For our SLES11 SP3 Machines we got the Client from the SuSE Repo
> zypper ar
> http://download.opensuse.org/repositories/systemsmanagement:/spacewalk:/2.2/
> SLE_11_SP3/x86_64/ spacewalk-tools
> 
> And installed the corresponding packages
> zypper install rhn-client-tools zypp-plugin-spacewalk rhnsd rhn-setup
> rhn-check yum
> 
> box704:~ # zypper refresh
> Retrieving repository 'sles11sp3' metadata [\]
> Download (curl) error for
> 'https://donkey101.gskv.org/XMLRPC/GET-REQ/bmb-extra_sles11sp3/repodata/repo
> md.xml?head_requests=no': Error code: Unrecognized error
> Error message: SSL certificate problem, verify that the CA cert is OK.
> Details:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed

Take care that the CA certificate is copied to /etc/ssl/certs/ with the suffix 
".pem" and you run a "c_rehash /etc/ssl/certs/"
 
E.g.:
$> cp /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT \
      /etc/ssl/certs/RHN-ORG-TRUSTED-SSL-CERT.pem
$> c_rehash /etc/ssl/certs/
 
-- 
Regards

	Michael Calmer

--------------------------------------------------------------------------
Michael Calmer
SUSE LINUX GmbH, Maxfeldstr. 5, D-90409 Nuernberg
T: +49 (0) 911 74053 0
F: +49 (0) 911 74053575  - e-mail: Michael.Calmer at suse.com
--------------------------------------------------------------------------
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Jennifer Guild,
                     Dilip Upmanyu, Graham Norton HRB 21284 (AG Nürnberg)