Translated message

A translation of this page exists in English.

系统连接到 RHN 失败并出现"The certificate is expired"或者 "certificate verify failed" 报错

Solution Verified - Updated -

Issue

在 RHEL 5 上运行的系统使用 yum 或者使用 RHN 进行系统注册时,出现下述报错:
~~~
"The certificate is expired. Please ensure you have the correct certificate and you system time is correct."
~~~

  • rhn-virtualization-host 的 cron job 生成下述日志:

    up2date_client.up2dateErrors.SSLCertificateVerifyFailedError: The certificate is expired. Please ensure you have the correct certificate and your system time is correct.
    
  • rhn_check失败并出现类似下述报错:

    [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
    
  • 每隔2秒在日志中出现"ssl certificate failed verification"

  • 不能通过 yum 安装或者更新软件包,并出现下述报错:

    up2date_client.up2dateErrors.SSLCertificateVerifyFailedError: The certificate is expired. Please ensure you have the correct certificate and your system time is correct.
    
  • rhn_register 失败并出现下述报错:

rhn_register ERROR: can not find RHNS CA file: /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
The certificate /usr/share/rhn/RHNS-CA-CERT is expired. Please ensure you have the correct certificate and your system time is correct.

Environment

  • Red Hat Enterprise Linux (RHEL) 5.4 或者之前版本
  • Red Hat Network (RHN) Classic
  • 0.4.19-17.el5_3.1 之前版本的 rhn-client-tools 包(RHEL5.3 Advanced mission critical only)
  • 0.4.20-33.el5 之前版本的 rhn-client-tools 包(RHEL5)
  • 4.9.1-30.el4 之前版本的 up2date 包(RHEL4)
  • 4.5.5-18.el3 之前版本的 up2date 包(RHEL3)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content