The process of updating or installing packages on a Red Hat Enterprise Linux server through yum using the Red Hat Satellite Server encounters failure due to an expired certificate or the expiration of the peer's certificate.

Issue

• How can I resolve the issue of certificate expiration when attempting to update or install packages on a Red Hat Enterprise Linux server via yum and Red Hat Satellite Server?

• What are the common causes of encountering SSL certificate expiry errors when performing package updates or installations through yum and Red Hat Satellite Server?

• When attempting to patch a system registered to Satellite 6, I encountered the following error:

  Jun 21 09:37:09 client dnf[2371535]: Error: Failed to download metadata for repo 'rhel-8-for-x86_64-appstream-rpms': Cannot download repomd.xml: Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://satellite.example.com/pulp/content/Default_Organization/Library/Base/content/dist/rhel8/8/x86_64/appstream/os/repodata/repomd.xml [SSL certificate problem: certificate has expired]
  

• What steps should be taken to renew or replace the expired certificate causing the failure in updating or installing packages on a Red Hat Enterprise Linux server via yum and Red Hat Satellite Server?

• Are there any alternative methods or workarounds to address the Peer's Certificate has expired error when using Red Hat Satellite Server for package management via yum?

• How can I verify the validity and expiration status of the SSL certificate used by Red Hat Satellite Server to ensure smooth package updates and installations via yum?

  https://vsatellite.example.com/pulp/repos/PROD/PROD/RHEL7/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml: 
  [Errno 14] curl#60 - "The certificate issuer's certificate has expired. Check your system date and time."
  

• yum transactions fail with [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted by the user."