Registration on Satellite 6 fails when RHEL 8 client has FIPS with a FUTURE crypto policy enabled
Issue
- Registration with
Satellite 6
fails whenRHEL 8
client hasFIPS
with aFUTURE
crypto policy enabled and has a customSSL certificates
with 2048 bit RSA key or less -
Running any
subscription-manager
oryum
command on RHEL 8Content-Host
registered withRed Hat Satellite
fails with the following error:SSL certificate problem: EE certificate key too weak Unable to verify server's identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)`
Environment
- Red Hat Satellite 6+
- Red Hat Enterprise Linux 8
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.