RHEL 9 (SSL Server Certificate Status verification FAILED)

Same issue...

Same here, fresh install, it worked till the first update, and now stopped.

Same here, fresh install, it worked till the first update, and now stopped.

I'm having the same issue. I also have a developer subscription and I only have two systems registered including the one I'm getting the error on when checking for updates.

I’ve already tried removing the DNF cache using ‘dnf clean all’, removed ‘/var/cache/dnf’, and unregistered then re-registered my system and still get the same error.

┌──(quentin@lpt-dell-dymv2)-[~]
└─$ sudo dnf clean all && sudo dnf --refresh update
Updating Subscription Management repositories.
0 files removed
Updating Subscription Management repositories.
1Password Stable Channel                                                                                                                                                                                                      4.0 kB/s | 1.9 kB     00:00    
Extra Packages for Enterprise Linux 9 - x86_64                                                                                                                                                                                3.7 MB/s |  10 MB     00:02    
Microsoft Linux Software Repository                                                                                                                                                                                           360 kB/s | 206 kB     00:00    
Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)                                                                                                                                                                         0.0  B/s |   0  B     00:00    
Errors during downloading metadata for repository 'rhel-9-for-x86_64-baseos-rpms':
  - Curl error (91): SSL server certificate status verification FAILED for https://cdn.redhat.com/content/dist/rhel9/9/x86_64/baseos/os/repodata/repomd.xml [No OCSP response received]
Error: Failed to download metadata for repo 'rhel-9-for-x86_64-baseos-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

I had the same error on a fresh install of RHEL 9. Here is what tried.

First Attempt : The first time, I created a hostname during install (network interface section) and also selected register during install itself. Right after install, none of yum commands worked with the same error listed above. Yum did not work even once. I tried everything from every forum/help article. Finally gave up.

Second Attempt : I re-installed RHEL9 fresh. This time, i skipped the registration during install, just set the hostname. After the system came up, waited for few minutes, then went through the registration process. Tada. The yum command worked, i was able to run 'yum update', install chrome etc. I could have waited but decided to fly close to sun. I tried to install KDE Workspaces, for which I have to install epel repo. As soon as i did that, the yum broke again with the same error above. Tried all sort of subscription registration/clear cache etc. Nothing worked.

I then removed the physical system from redhat account, unregistered and re-registered. This time yum update worked nicely. The instructions I followed are here - https://access.redhat.com/articles/433903

Will continue to monitor. Fingers Crossed. Not going to install anything to see if the system/subscription stays stable.

Nevertheless this whole subscription system is finicky at at is best. Very fragile. Also seems to have a self signed certificate somewhere in the chain that is causing the issue as well. Too many variables to figure out what the heck is going on.

Just tried checking for updates again, and everything seems to be working as normal for me. Not sure what changed, and I didn't do anything differently.

Same issue This workaround - https://access.redhat.com/solutions/6978398 works for me

Try this solutions if match this criteria: Red Hat Enterprise Linux for x86_64 - 9.0 - x86_64 You can configure the certificate of Red Hat Enterprise Linux for x86_64 - 9.0 - x86_64 by using a script or manually with the instructions below.

Option 1: Scripted Configuration Download Red_Hat_Product_Certificates.sh chmod +x Red_Hat_Product_Certificates.sh ./Red_Hat_Product_Certificates.sh

Option 2: Manual Configuration Create directory /etc/pki/product/.

Change the permission and ownership of this file.

restorecon -Rv /etc/pki/product chown root.root /etc/pki/product/479.pem chmod 644 /etc/pki/product/479.pem rct cat-cert /etc/pki/product/479.pem

Register your system.

subscription-manager register --auto-attach subscription-manager refresh subscription-manager identity

I had the same issue and corrected the time to make it work (used timedatectl as I was not able to download other dependent software to configure NTP)

I had the same issue and it's fixed after yum upgrade

It's the time... Correcting the time resolved the issue for me.

I had the same problem , systemctl restart chronyd and than worked with no problem

Just check the time is configured systemctl start chronyd and issue chronyc sources to make sure the pools are synced to your system then you can update

Multiple solutions have already been provided and I agree that it's mostly a time sync issue. The below command is also worth trying,

sudo chronyc -a makestep

Please have a look to below logs,

[root@controller ~]# dnf update
Updating Subscription Management repositories.
Repository ansible-automation-platform-temp is listed more than once in the configuration
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                                                      0.0  B/s |   0  B     00:00
Errors during downloading metadata for repository 'rhel-8-for-x86_64-appstream-rpms':
  - Curl error (91): SSL server certificate status verification FAILED for https://cdn.redhat.com/content/dist/rhel8/8.8/x86_64/appstream/os/repodata/repomd.xml [OCSP response has expired]
Error: Failed to download metadata for repo 'rhel-8-for-x86_64-appstream-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
[root@controller ~]#
[root@controller ~]# date
Mon Jun 26 10:04:48 EDT 2023
[root@controller ~]# chronyc -a makestep
200 OK
[root@controller ~]# date
Sun Jul 16 21:02:14 EDT 2023
[root@controller ~]# dnf update
Updating Subscription Management repositories.
Repository ansible-automation-platform-temp is listed more than once in the configuration
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                                                       13 MB/s |  58 MB     00:04
Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                                                          13 MB/s |  62 MB     00:04
Last metadata expiration check: 0:00:32 ago on Sun 16 Jul 2023 09:03:21 PM EDT.
Dependencies resolved.
==============================================================================================================================================================================================================
 Package                                                  Architecture         Version                                                                   Repository                                      Size
==============================================================================================================================================================================================================
Installing:
 kernel                                                   x86_64               4.18.0-477.15.1.el8_8                                                     rhel-8-for-x86_64-baseos-rpms                  9.4 M
 kernel-core                                              x86_64               4.18.0-477.15.1.el8_8                                                     rhel-8-for-x86_64-baseos-rpms                   42 M
 kernel-devel                                             x86_64               4.18.0-477.15.1.el8_8                                                     rhel-8-for-x86_64-baseos-rpms                   23 M

Recommend a ticket with Red Hat.. Some regions occasionally have CDN issues that are region specific. Please include an SOS report with the ticket

Regards,
RJ