Yum command fails with a Curl error that ends in "[SSL: no alternative certificate subject name matches target host name 'loadbalancer.example.com'] after upgrading load-balanced capsules
Issue
-
After upgrading load-balanced capsules from the 6.10 to the 6.11 release, content hosts registered to the upgraded capsules can no longer get content from the capsules.
-
Any content host trying to pull patches from the capsules is getting the following error message:
Errors during downloading metadata for repository 'rhel-8-for-x86_64-appstream-rpms': - Curl error (51): SSL peer certificate or SSH remote key was not OK for https://loadbalancer.example.com/pulp/repos/Org1/Library/cv_rhel8_x86_64/content/dist/rhel8/8/x86_64/appstream/os/repodata/repomd.xml [SSL: no alternative certificate subject name matches target host name 'loadbalancer.example.com'] Error: Failed to download metadata for repo 'rhel-8-for-x86_64-appstream-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
-
The capsule servers were upgraded following the procedure described in section 3.3. Upgrading Capsule Servers of the Upgrading and Updating Red Hat Satellite guide.
Environment
- Red Hat Satellite 6.11 server and two capsules with load balancing configuration.
- The Red Hat Satellite and Capsule 6.11 servers were recently upgraded from the 6.10 release.
- Affected content hosts are registered to the recently upgraded Red Hat Capsule 6.11 servers.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.