asked on

Red Hat SSL Cert error

Hello,

I seem to get the following SSL cert error when trying to use yum, could anyone assist?

Thanks,
Dave

Component: pirut
Summary: TB3e4030d0 rhnserver.py:64:__call__:SSLCertificateVerifyFailedError: The SSL certificate failed verification.

Traceback (most recent call last):
  File "/usr/sbin/pirut", line 490, in ?
    main()
  File "/usr/sbin/pirut", line 483, in main
    pm = PackageManager(options.config, options.onlyrepo)
  File "/usr/sbin/pirut", line 67, in __init__
    GraphicalYumBase.__init__(self, False, config)
  File "/usr/lib/python2.4/site-packages/pirut/__init__.py", line 137, in __init__
    plugin_types=(yum.plugins.TYPE_CORE,))
  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 118, in doConfigSetup
    errorlevel=errorlevel)
  File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 183, in _getConfig
    self.plugins.run('init')
  File "/usr/lib/python2.4/site-packages/yum/plugins.py", line 169, in run
    func(conduitcls(self, self.base, conf, **kwargs))
  File "/usr/lib/yum-plugins/rhnplugin.py", line 110, in init_hook
    login_info = up2dateAuth.getLoginInfo()
  File "/usr/share/rhn/up2date_client/up2dateAuth.py", line 211, in getLoginInfo
    login()
  File "/usr/share/rhn/up2date_client/up2dateAuth.py", line 178, in login
    li = server.up2date.login(systemId)
  File "/usr/share/rhn/up2date_client/rhnserver.py", line 64, in __call__
    raise up2dateErrors.SSLCertificateVerifyFailedError()
SSLCertificateVerifyFailedError: The SSL certificate failed verification.

Local variables in innermost frame:
args: ('<?xml version="1.0"?>\n<params>\n<param>\n<value><struct>\n<member>\n<name>username</name>\n<value><string>nccweb1</string></value>\n</member>\n<member>\n<name>operating_system</name>\n<value><string>redhat-release</string></value>\n</member>\n<member>\n<name>description</name>\n<value><string>Initial Registration Parameters:\nOS: redhat-release\nRelease: 5Server\nCPU Arch: i686-redhat-linux</string></value>\n</member>\n<member>\n<name>checksum</name>\n<value><string>ddcbe498ba465e53a82e340162d23e28</string></value>\n</member>\n<member>\n<name>profile_name</name>\n<value><string>172.22.40.46</string></value>\n</member>\n<member>\n<name>system_id</name>\n<value><string>ID-1013309576</string></value>\n</member>\n<member>\n<name>architecture</name>\n<value><string>i686-redhat-linux</string></value>\n</member>\n<member>\n<name>os_release</name>\n<value><string>5Server</string></value>\n</member>\n<member>\n<name>fields</name>\n<value><array><data>\n<value><string>system_id</string></value>\n<value><string>os_release</string></value>\n<value><string>operating_system</string></value>\n<value><string>architecture</string></value>\n<value><string>username</string></value>\n<value><string>type</string></value>\n</data></array></value>\n</member>\n<member>\n<name>type</name>\n<value><string>REAL</string></value>\n</member>\n</struct></value>\n</param>\n</params>\n',)
e: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
self: <up2date_client.rhnserver._DoCallWrapper object at 0x8cec8ec>
error: 'SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed'
pieces: ["'SSL routines'", " 'SSL3_GET_SERVER_CERTIFICATE'", " 'certificate verify failed'"]
kwargs: {}
message: certificate verify failed

Open in new window

Member_2_6582184

I suppose it is RHEL 5 and you are using satellites?

https://access.redhat.com/site/solutions/93313

dloszewski

ASKER

correct, unfortunately I'm not a subscriber so unable to see that posting

tmoore1962

the ssl cert has expired. Goggle how to configure YUM to not use ssl cert there was a write up for it as I had to do it just a little while ago but can't find notes on the file to edit so that it doesn't update using ssl connection.

gheist

Sadly if your subscriptin has expired you are not entitled to run your system anymore. Redhat Licence is readable without subscription...

ASKER CERTIFIED SOLUTION

Member_2_6582184

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

gheist

You can also convert to oracle linux http://public-yum.oracle.com/ (Especially good if you would like to have certified platform for their database...)
(Actually it is a minor patch that extends that certificate, and $ends a warning message IF you are a subscriber)