Why does kickstart with liveimg as source FAILS when using HTTPS and --noverifyssl flag ?
Issue
-
When using kickstart with
liveimgcommand to provide a source image hosted over HTTPS URL using self signed certificates, it fails to download the image with errorSSL: CERTIFICATE_VERIFY_FAILEDeven when using the--noverifysslflagHTTPSConnectionPool(host='HTTPServer.example.com', port=443): Max retries exceeded with url: /liveimg-tests/image-root.tar.xz (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),)) -
When use the source URL over HTTP , the installation works but same fails over HTTPS
WORKS liveimg --url http://HTTPServer.example.com/liveimg-tests/image-root.tar.xz --noverifyssl FAILS liveimg --url https://HTTPServer.example.com/liveimg-tests/image-root.tar.xz --noverifyssl -
The kickstart documentation states that
--noverifysslshould disable SSL verification when connecting to an HTTPS URL, but it still receives this error.
Environment
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.