Connected Satellite certificate activation returns 'unsupported version' or 'Invalid satellite certificate'

Solution Verified - Updated -

Environment

  • Red Hat Satellite 5.x

Issue

  • When activating the satellite certificate on the satellite server the following error message is returned (the number following "unsupport version" may be different):
         ERROR: <Fault -2: 'unhandled internal exception: unsupported version: 96'> 

or

         RHN_PARENT: satellite.rhn.redhat.com
         Error reported from RHN: <Fault -2: 'unhandled internal exception: unsupported version: 115'>
         ERROR: unhandled XMLRPC fault upon remote activation: <Fault -2: 'unhandled internal exception: unsupported version: 115'>
         ERROR: <Fault -2: 'unhandled internal exception: unsupported version: 115'>

or

         Error reported from RHN: <Fault -2: 'unhandled internal exception: unsupported version: 89'

or

Executing: remote XMLRPC deactivation (if necessary).
Executing: remote XMLRPC activation call.
Error reported from RHN: <Fault -2: 'unhandled internal exception: unsupported version: 234'>
ERROR: unhandled XMLRPC fault upon remote activation: <Fault -2: 'unhandled internal exception: unsupported version: 234'>

ERROR: <Fault -2: 'unhandled internal exception: unsupported version: 234'>

and an attempt to activate the certificate on RHN Hosted web interface returns:

         Invalid satellite certificate
  • rhn-satellite-activate throws the error,
# rhn-satellite-activate -vvv --rhn-cert=/path/to/certificate.cert 
RHN_PARENT: satellite.rhn.redhat.com
HTTP_PROXY: None
HTTP_PROXY_USERNAME: None
HTTP_PROXY_PASSWORD: <password>
CA_CERT: /usr/share/rhn/RHNS-CA-CERT
Checking  cert XML sanity and GPG signature: '/usr/bin/validate-sat-cert.pl  --keyring /etc/webapp-keyring.gpg  /etc/sysconfig/rhn/rhn-entitlement-cert.xml-8oD6kG'
Database connectioned initialized: refer to /etc/rhn/rhn.conf
Attempting local RHN Certificate push (and therefore activation)
Executing: remote XMLRPC deactivation (if necessary).
Executing: remote XMLRPC activation call.
Error reported from RHN: <Fault 1024: 'Invalid Satellite Certificate'>
NOTE: hosted RHN reports 'invalid_sat_certificate'.

ERROR: <Fault 1024: 'Invalid Satellite Certificate'>

Resolution

Root Cause

  • These errors are generally seen due to a bad Satellite Certificate.

Diagnostic Steps

  • Check the owner field in the Satellite certificate for blank spaces at starting.
# grep owner XXX-corp.cert 
  <rhn-cert-field name="owner"> XXX XXX Corp</rhn-cert-field>
  • Remove the blank space at the starting in the owner field and get it re-signed.
# grep owner XXX-corp.cert 
  <rhn-cert-field name="owner">XXX XXX Corp</rhn-cert-field>
  • Issue a new certificate or resign the old one.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments