Receiving update-ca-trust when installing katello-ca-consumer rpm from Satellite
Environment
- Red Hat Enterprise Linux
- Red Hat Satellite 6
Issue
When installing the Satellite katello-ca-consumer rpm to register content host, the following error is seen:
Installing : katello-ca-consumer-satellite6.example.com-1.0-3.noarch 1/1
update-ca-trust: Legacy CA bundle files aren't in the default state, they have been modified.
update-ca-trust: You should research the configuration changes that have been performed and add equivalent configuration after enabling the new dynamic configuration
update-ca-trust: Below is a list of files that have been modified:
update-ca-trust: missing c /etc/pki/java/cacerts
update-ca-trust: Aborting because system uses modified legacy bundle files.
update-ca-trust: If you're certain, use force-enable
warning: %post(katello-ca-consumer-satellite6.example.com-1.0-3.noarch) scriptlet failed, exit status 1
Non-fatal POSTIN scriptlet failure in rpm package katello-ca-consumer-satellite6.example.com-1.0-3.noarch
Resolution
Restore the symlink for /etc/pki/java/cacerts:
- ln -s /etc/pki/java/cacerts /etc/pki/ca-trust/extracted/java/cacerts
After restoring the symlink, attempt to install the katello-ca-consumer rpm again.
Root Cause
The following file was missing:
update-ca-trust: You should research the configuration changes that have been performed and add equivalent configuration after enabling the new dynamic configuration
update-ca-trust: Below is a list of files that have been modified:
update-ca-trust: missing c /etc/pki/java/cacerts
Diagnostic Steps
After creating the symlink, run update-ca-trust to make sure it succeeds.
[root@contenthost ~]# update-ca-trust
[root@contenthost ~]#
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.
Comments