Red Hat Enterprise Linux server update via yum/dnf is failing with error `SSL certificate problem: CA certificate key too weak`
Issue
-
While trying to update a Red Hat Enterprise Linux server using Red Hat Satellite Server is failing with below mentioned error message.
Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://satellite.example.com/pulp/repos/Default_Organization/Library/content/dist/layered/rhel8/x86_64/sat-tools/6.7/os/repodata/repomd.xml [SSL certificate problem: EE certificate key too weak] -
Not able to install packages due to SSL certificate problem.
-
SSL certificate problem when installing any package:
# yum install telnet Updating Subscription Management repositories. RHEL 8 0.0 B/s | 0 B 00:00 Errors during downloading metadata for repository 'TEST_repo-rhel-8-RHEL_8': - Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://test.example.com/pulp/content/TEST/production-rhel-8/cv-rhel-8/custom/repo-rhel-8/RHEL_8_TEST/repodata/repomd.xml [SSL certificate problem: CA certificate key too weak] Error: Failed to download metadata for repo 'TEST_repo-rhel-8-RHEL_8': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Environment
- Red Hat Enterprise Linux 8
- Any of the following as the source of the packages:
- Red Hat Satellite 6.x
- The Red Hat CDN
- Online third party repository
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.