Applying custom certificates on Red Hat Satellite fails with exception "SSL_CTX_load_verify_file: no certificate or crl found" due to incorrect CA Certificate format

Solution Verified - Updated -

Issue

  • Running the satellite-installer command to configure Red Hat Satellite with custom SSL certificates fails with the following error:

    Exception SSL_CTX_load_verify_file: no certificate or crl found
    

    Example output:

    # satellite-installer --scenario satellite \
    --certs-server-cert "/root/satellite_cert1/satellite_cert_csr.pem.txt" \
    --certs-server-key "/root/satellite_cert1/satellite_cert_key.pem" \
    --certs-server-ca-cert "/root/satellite_cert1/Root.txt" \
    --certs-update-server --certs-update-server-ca
    
    ...
    2025-07-22 16:17:54 [ERROR ] [configure] Exception SSL_CTX_load_verify_file: no certificate or crl found in post   request to: https://<satellite_fqdn>/api/v2/hosts/facts
    

Environment

  • Red Hat Satellite 6.x
  • Configuring Satellite Server with custom SSL certificate

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content