Unable to enable Redhat Repositories

Solution In Progress - Updated -

Issue

  • Please can you give root CA and intermidiatory certificate for CN=Red Hat Entitlement Operations Authority. So that we can put those into our cisco WSA proxy.
    We think that we need those certs inorder to work.
CN=Red Hat Entitlement Operations Authority,OU=Red Hat Network,O="Red Hat, Inc.",ST=North Carolina,C=US
  • Testing result with cdn.redhat.com:
#  openssl s_client -connect cdn.redhat.com:443 -CAfile /usr/share/rhn/RHNS-CA-CERT
CONNECTED(00000003)
depth=1 C = US, O = "Cisco IronPort Systems, Inc.", ST = California, L = San Bruno, CN = Untrusted Certificate Warning
verify error:num=19:self signed certificate in certificate chain
verify return:0
---
Certificate chain
 0 s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat/OU=Red Hat Network/CN=cdn.redhat.com
   i:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
 1 s:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
   i:/C=US/O=Cisco IronPort Systems, Inc./<...>/CN=Untrusted Certificate Warning <===
...
  • Satellite.rhn.redhat.com works fine as we think that we have Root CA for CN=RHN Certificate Authority.
# openssl s_client -connect satellite.rhn.redhat.com:443
CONNECTED(00000003)
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 C = US, ST = North Carolina, L = Raleigh, O = "Red Hat, Inc.", OU = IT, CN = satellite.rhn.redhat.com, emailAddress = helpdesk@redhat.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=IT/CN=satellite.rhn.redhat.com/emailAddress=helpdesk@redhat.com
   i:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.com
...

Environment

  • Red Hat Satellite 6.0
  • Cisco WSA proxy

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.