Error certificate verify failed (unable to get local issuer certificate) when trying to revert back to default self-signed certificates in Red Hat Satellite 6.17
Issue
-
While following the steps as described in Resetting custom SSL certificate to default self-signed certificate on Satellite Server section, The execution of the
satellite-installer
command failed with the following error:# satellite-installer --certs-reset 2025-06-23 18:04:41 [NOTICE] [root] Loading installer configuration. This will take some time. 2025-06-23 18:04:45 [NOTICE] [root] Running installer with log based terminal output at level NOTICE. 2025-06-23 18:04:45 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions. 2025-06-23 18:04:45 [NOTICE] [checks] System checks passed Package versions are locked. Continuing with unlock. Marking certificate /root/ssl-build/katello-server-ca for update 2025-06-23 18:04:52 [NOTICE] [configure] Starting system configuration. 2025-06-23 18:04:58 [NOTICE] [configure] 250 configuration steps out of 2193 steps complete. .. .. 2025-06-23 18:05:02 [NOTICE] [configure] 2500 configuration steps out of 2792 steps complete. 2025-06-23 18:05:22 [ERROR ] [configure] Exception SSL_connect returned=1 errno=0 peeraddr=192.168.125.3:443 state=error: certificate verify failed (unable to get local issuer certificate) in post request to: https://satellite617.lab.example.com/api/v2/hosts/facts 2025-06-23 18:05:22 [ERROR ] [configure] Wrapped exception: 2025-06-23 18:05:22 [ERROR ] [configure] SSL_connect returned=1 errno=0 peeraddr=192.168.125.3:443 state=error: certificate verify failed (unable to get local issuer certificate) 2025-06-23 18:05:22 [ERROR ] [configure] /Stage[main]/Foreman::Register/Foreman_host[foreman-satellite617.lab.example.com]/ensure: change from 'absent' to 'present' failed: Exception SSL_connect returned=1 errno=0 peeraddr=192.168.125.3:443 state=error: certificate verify failed (unable to get local issuer certificate) in post request to: https://satellite617.lab.example.com/api/v2/hosts/facts 2025-06-23 18:05:23 [ERROR ] [configure] /Stage[main]/Foreman_proxy::Register/Foreman_host[foreman-proxy-satellite617.lab.example.com]: Could not evaluate: Exception SSL_connect returned=1 errno=0 peeraddr=192.168.125.3:443 state=error: certificate verify failed (unable to get local issuer certificate) in get request to: https://satellite617.lab.example.com/api/v2/hosts?search=name%3D%22satellite617.lab.example.com%22
-
The same option used to work fine in the Red Hat Satellite 6.16 or the versions before that.
Environment
- Red Hat Satellite 6.17
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.