[Spacewalk-list] Registration to the new server via rhnreg_ks returns an SSL error

[Zhou, Rui A. (NSB - CN/Shanghai)]

I re-installed the spacewalk server, and the client can not register to the new installed server.

[root at FNSHB109 rhn]# rpm -e rhn-org-trusted-ssl-cert-1.0-1.noarch

[root at FNSHB109 rhn]# rpm -Uvh http://spacewalk-server/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm
Retrieving http://spacewalk-server/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm
Preparing...                          ################################# [100%]
Updating / installing...
   1:rhn-org-trusted-ssl-cert-1.0-1   ################################# [100%]

[root at FNSHB109 rhn]# rhnreg_ks --serverUrl=https://spacewalk-server/XMLRPC --sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT --activationkey=1-centos7.6 --force --verbose
D: rpcServer: Calling XMLRPC registration.welcome_message
An error has occurred:
The SSL certificate failed verification.
See /var/log/up2date for more information

[root at FNSHB109 rhn]# cat /etc/sysconfig/rhn/up2date |grep share
sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT

[Thu Feb 28 16:53:34 2019] up2date D: rpcServer: Calling XMLRPC registration.welcome_message
[Thu Feb 28 16:53:34 2019] up2date
Traceback (most recent call last):
  File "/usr/sbin/rhnreg_ks", line 215, in <module>
    cli.run()
  File "/usr/lib/python2.7/site-packages/up2date_client/rhncli.py", line 94, in run
    sys.exit(self.main() or 0)
  File "/usr/sbin/rhnreg_ks", line 93, in main
    rhnreg.getCaps()
  File "/usr/lib/python2.7/site-packages/up2date_client/rhnreg.py", line 264, in getCaps
    s.capabilities.validate()
  File "/usr/lib/python2.7/site-packages/up2date_client/rhnserver.py", line 185, in __get_capabilities
    self.registration.welcome_message()
  File "/usr/lib/python2.7/site-packages/up2date_client/rhnserver.py", line 84, in __call__
    raise_with_tb(up2dateErrors.SSLCertificateVerifyFailedError())
  File "/usr/lib/python2.7/site-packages/up2date_client/rhnserver.py", line 67, in __call__
    return rpcServer.doCall(method, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/up2date_client/rpcServer.py", line 214, in doCall
    ret = method(*args, **kwargs)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__
    return self.__send(self.__name, args)
  File "/usr/lib/python2.7/site-packages/up2date_client/rpcServer.py", line 48, in _request1
    ret = self._request(methodname, params)
  File "/usr/lib/python2.7/site-packages/rhn/rpclib.py", line 394, in _request
    self._handler, request, verbose=self._verbose)
  File "/usr/lib/python2.7/site-packages/rhn/transports.py", line 177, in request
    headers, fd = req.send_http(host, handler)
  File "/usr/lib/python2.7/site-packages/rhn/transports.py", line 733, in send_http
    self._connection.request(self.method, handler, body=bstr(self.data), headers=self.headers)
  File "/usr/lib64/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib64/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib64/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib64/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib64/python2.7/httplib.py", line 840, in send
    self.sock.sendall(data)
  File "/usr/lib/python2.7/site-packages/rhn/SSL.py", line 264, in write
    sent = self._connection.send(data)
<class 'up2date_client.up2dateErrors.SSLCertificateVerifyFailedError'>: The SSL certificate failed verification.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20190228/a425911d/attachment.htm>