[Satellite6] repository synchronization fails with Forbidden error after successfull manifest refresh

Solution In Progress - Updated -


  • (successfully) refreshing or importing manifest that replaces some (to be) expired certificates
  • synchronizing some repositories from CDN fails with Forbidden error
  • checking client certificate used for the repository via this solution shows invalid or expired certificate is used

In summary, while candlepin certificates seem to be properly updated by the manifest import/refresh, pulp certificates are not.

How to refresh pulp certificates per candlepin ones?


Red Hat Satellite 6.3 or newer

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In