ssl certificate failed verification

Latest response

I changed my satellite from http to https and now I receive the error above.
ssl certificate failed verification.

rhel 6.9 with satellite 5.8, clients are 6.9

Seems it should just be related to this change. ssl cert seems to pass "grep -C 2 Validity" so I don't think I'd need a new cert.

I had a couple weeks before updated from 5.6 to 58 satellite, but I could have sworn I checked to make sure updates worked. So, I'd like to head in the direction of bypassing https for clients checking for updates. The change was only meant to increase web security.

JS
Log in to join the conversation

Responses

RD Red Hat Expert 1291 points
21 May 2018 3:05 AM

Jon,

From what you have written, you have Satellite 5.8 installed on RHEL 6.9, managing RHEL 6.9 hosts. Can you explain further what you mean by "I changed my Satellite from HTTP to HTTPS"? The Satellite 5 web UI should already have been accessible via HTTP and HTTPS. Where and when do you get the message "SSL certificate failed verification"?

Raghavan Raja's picture Community Member 81 points
21 May 2018 4:48 AM

Hi Jon Schwendemann pls share me if any documents you have in redhat satellite ragavan189@gmail.com

JS Community Member 45 points
21 May 2018 1:46 PM

The error happens on a client when checking against the satellite for update. They seem to check in just fine to satellite, as satellite lists the update that are available for each client.

RD Red Hat Expert 1291 points
21 May 2018 10:18 PM

Jon,

I am not very familiar with Red Hat Satellite 5.8, but I hope the following information is of some use to you. If you continue to have difficulty I encourage you to raise a Support Case with Red Hat Support.

I suggest you read the Red Hat Satellite 5.8 Client Configuration Guide [1] as it contains information that may help you resolve this issue. I believe the root cause is that the clients do not have the appropriate certificate installed.

For example, section 3.2. The Red Hat Satellite SSL Maintenance Tool includes the following. From what I understand, this matches what you are trying to achieve.

The Red Hat Satellite SSL Tool is required in the following situations:
When reconfiguring the Satellite or Proxy infrastructure to use SSL where it previously did not.

[1] https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/html/client_configuration_guide/

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.