Unable to enable Redhat Repositories
Issue
- Please can you give root CA and intermidiatory certificate for CN=Red Hat Entitlement Operations Authority. So that we can put those into our cisco WSA proxy.
We think that we need those certs inorder to work.
CN=Red Hat Entitlement Operations Authority,OU=Red Hat Network,O="Red Hat, Inc.",ST=North Carolina,C=US
- Testing result with cdn.redhat.com:
# openssl s_client -connect cdn.redhat.com:443 -CAfile /usr/share/rhn/RHNS-CA-CERT
CONNECTED(00000003)
depth=1 C = US, O = "Cisco IronPort Systems, Inc.", ST = California, L = San Bruno, CN = Untrusted Certificate Warning
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
0 s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat/OU=Red Hat Network/CN=cdn.redhat.com
i:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
1 s:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
i:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
...
- Satellite.rhn.redhat.com works fine as we think that we have Root CA for CN=RHN Certificate Authority.
# openssl s_client -connect satellite.rhn.redhat.com:443
CONNECTED(00000003)
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=IT/CN=satellite.rhn.redhat.com/emailAddress=helpdesk@redhat.com
i:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.com
...
Environment
- Red Hat Satellite 6.0
- Cisco WSA proxy
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.