OpenSCAP Scan Fails with `POLICY_XX: command not found` and `could not load PEM client certificate` when using `foreman_scap_client_bash`

Solution Verified - Updated -

Issue

  • On RHEL clients registered to Red Hat Satellite, running an OpenSCAP scan using the manual deployment method fails with the following errors:

    /usr/bin/foreman_scap_client 12
/usr/bin/foreman_scap_client: line 114: POLICY_12: command not found
/usr/bin/foreman_scap_client: line 115: POLICY_12: command not found
/usr/bin/foreman_scap_client: line 116: POLICY_12: command not found
/usr/bin/foreman_scap_client: line 117: POLICY_12: command not found
File  is missing. Downloading it from proxy.
Download SCAP content xml from: https://<capsule_fqdn>:9090
SCAP content is missing and download failed with error: curl: (58) could not load PEM client certificate,OpenSSL error error:02001002:system library:fopen:No such file or directory, (no key found, wrong pass phrase, or wrong file format?)

Environment

  • Red Hat Satellite 6.15 or later
  • OpenSCAP policies deployed using the manual deployment
  • Package foreman_scap_client_bash-0.2.0-2.el9sat.noarch installed on client

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content