Hi, Am Sonntag, 8. Februar 2015, 15:02:32 schrieb Bernd Helber: > Hello List, > > we installed a Spacewalk 2.2 Server for central Patchmanagement and > Kickstart Rollouts. Most Things worked flawlessly. > > But currently we face an annoying problem with the Spacewalk Clients > for Sles11 SP2, SP3 and also SP1 > > From Time to time we see Problems with the SSL Handshake between the > Sles Clients and the Spacewalk Server > Error message: SSL certificate problem, verify that the CA cert is > OK. Details:
Well, on SSL problems the first thing I would check is, if date and time of the client is set correct. [...] > For our SLES11 SP3 Machines we got the Client from the SuSE Repo > zypper ar > http://download.opensuse.org/repositories/systemsmanagement:/spacewalk:/2.2/ > SLE_11_SP3/x86_64/ spacewalk-tools > > And installed the corresponding packages > zypper install rhn-client-tools zypp-plugin-spacewalk rhnsd rhn-setup > rhn-check yum > > box704:~ # zypper refresh > Retrieving repository 'sles11sp3' metadata [\] > Download (curl) error for > 'https://donkey101.gskv.org/XMLRPC/GET-REQ/bmb-extra_sles11sp3/repodata/repo > md.xml?head_requests=no': Error code: Unrecognized error > Error message: SSL certificate problem, verify that the CA cert is OK. > Details: > error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate > verify failed Take care that the CA certificate is copied to /etc/ssl/certs/ with the suffix ".pem" and you run a "c_rehash /etc/ssl/certs/" E.g.: $> cp /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT \ /etc/ssl/certs/RHN-ORG-TRUSTED-SSL-CERT.pem $> c_rehash /etc/ssl/certs/ -- Regards Michael Calmer -------------------------------------------------------------------------- Michael Calmer SUSE LINUX GmbH, Maxfeldstr. 5, D-90409 Nuernberg T: +49 (0) 911 74053 0 F: +49 (0) 911 74053575 - e-mail: [email protected] -------------------------------------------------------------------------- SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton HRB 21284 (AG Nürnberg) _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
