We have bought 2 keys for 2 servers to try and register them and get updates.
One of the servers is SLES 11SP3. When I try the command:
suse_register -a regcode-sles=XXXXXXXXXXXX -a email=XXXXXXXXX -L /root/.suse_register.log
I get:
Problem retrieving the repository index file for service ‘nu_novell_com’:
Download (curl) error for ‘https://nu.novell.com/repo/repoindex.xml?cookies=0&credentials=NCCcredentials’:
Error code: Unrecognized error
Error message: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
I tried disabling and enabling repositories and I also removed the CA cert and recreated it following https://www.novell.com/support/kb/doc.php?id=7006024 but to no avail. In the knowledgebase document I got to when I had to restart SMT using “rcsmt restart” which the system said does not exist.
The second server is SLES 11SP2.
When running the command: “suse_register -a regcode-sles=XXXXXXXXXXXX -a email=XXXXXXXXX -L /root/.suse_register.log” I do actually get: Registration finished successfully.
But then I went and checked and there are no repositories. Not even 1. So I tried adding some from http://scc.suse.com/ where I found them listed with the subscriptions, but every one I try I get:
Permission to access ‘https://updates.suse.com…’ denied.
Can anyone please help me resolve these issues?
If it helps on the SLES11 SP3 (which has the SSL error):
Output of: rpm -qa | grep ssl
openssl-0.9.8j-0.70.1
libopenssl0_9_8-32bit-0.9.8j-0.70.1
openssl-certs-1.97-0.3.1
libopenssl0_9_8-0.9.8j-0.70.1
Output of: openssl verify -CAfile /var/lib/CAM/YaST_Default_CA/cacert.pem /etc/ssl/certs/YaST-CA.pem
/etc/ssl/certs/YaST-CA.pem: OK
Output of: openssl x509 -in /var/lib/CAM/YaST_Default_CA/cacert.pem -text | grep -A10 -B10 Validity
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
cc:90:37:cc:ad:3b:b7:b8
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=MT, O=RS2 Software, CN=YaST_Default_CA/emailAddress=it@rs2.com
Validity
Not Before: Jul 15 11:41:29 2015 GMT
Not After : Jul 12 11:41:29 2025 GMT
Subject: C=MT, O=RS2 Software, CN=YaST_Default_CA/emailAddress=it@rs2.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:d6:10:cd:6d:c1:6c:59:b5:29:5e:b9:0e:d2:79:
8f:ef:84:67:a6:26:0c:bb:c8:e8:42:a0:73:53:ee:
71:ac:7a:75:37:d1:6e:fe:4c:c7:00:37:73:1f:da:
On the other server the SLES SP2 which registers but I cannot add repos:
Output of: rpm -qa | grep ssl
libopenssl0_9_8-0.9.8j-0.26.1
openssl-0.9.8j-0.26.1
openssl-certs-0.9.8h-27.3.1
libopenssl0_9_8-32bit-0.9.8j-0.26.1
Output of: openssl verify -CAfile /var/lib/CAM/YaST_Default_CA/cacert.pem /etc/ssl/certs/YaST-CA.pem
/etc/ssl/certs/YaST-CA.pem: OK
Output of: openssl x509 -in /var/lib/CAM/YaST_Default_CA/cacert.pem -text | grep -A10 -B10 Validity
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d8:52:6b:66:0a:c3:02:ae
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=GB, CN=YaST Default CA (PCI-WEBSRV)/emailAddress=postmaster@rs2.com
Validity
Not Before: Mar 24 17:48:46 2015 GMT
Not After : Mar 21 17:48:46 2025 GMT
Subject: C=GB, CN=YaST Default CA (PCI-WEBSRV)/emailAddress=postmaster@rs2.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Modulus (2048 bit):
00:c9:49:1d:7e:62:0a:c8:ef:a6:b2:a1:df:ff:1a:
22:5b:df:ef:e5:d6:76:78:3e:bc:96:be:e5:97:8e:
dd:a2:2c:c2:16:8f:28:d1:4c:65:7b:96:b6:21:8b:
Any help would be appreciated. Thanks.