Unable to locally verify the issuer's authority.

SUSE Manager
1

To whom it may concern

I am getting the following under-mentioned error messages when I try to register new SLES 11 SP3 and SLES 15 clients on SUSE Manager 3.2. The already registered clients are all running 100%. The customer’s SUSE Manager licenses did not expire.

I did recreate a new SLES 11 SP3 and SLES 15 activation key, but I am still getting the under mentioned certificate error messages.

UPDATING RHN_REGISTER/UP2DATE CONFIGURATION FILES

  • downloading necessary files
    client_config_update.py…
    WARNING: cannot verify rbsuse.umhlat.co.za’s certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za’:

Unable to locally verify the issuer’s authority.
2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/bootstrap/client_config_update.py [6478/6478] → “client_config_update.py” [1]
FINISHED --2019-11-24 06:42:19–
Downloaded: 1 file, 6.3K in 0s (88.9 MB/s)
client-config-overrides.txt…
WARNING: cannot verify rbsuse.umhlat.co.za’s certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za’:
Unable to locally verify the issuer’s authority.
2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/bootstrap/client-config-overrides.txt [643/643] → “client-config-overrides.txt” [1]
FINISHED --2019-11-24 06:42:19–
Downloaded: 1 files, 643 in 0s (66.3 MB/s)

PREPARE GPG KEYS AND CORPORATE PUBLIC CA CERT

  • no organizational GPG keys to import
  • attempting to install corporate public CA cert
    WARNING: cannot verify rbsuse.umhlat.co.za’s certificate, issued by `/C=ZA/ST=KN/L=RBay/O=Umhlat/OU=Umhlat/CN=rbsuse.umhlat.co.za’:
    Unable to locally verify the issuer’s authority.
    2019-11-24 06:42:19 URL:https://rbsuse.umhlat.co.za/pub/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm [9418/9418] → “rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm” [1]
    FINISHED --2019-11-24 06:42:19–

Downloaded: 1 files, 9.2K in 0s (98.5 MB/s)
Preparing… ##################################################
rhn-org-trusted-ssl-cert ##################################################
CLEANING UP OLD SUSE MANAGER REPOSITORIES

  • When running an mgr-sync-refresh I am getting the under-mentioned error message :

rbsuse:/srv/www/htdocs/pub/bootstrap # yast
rbsuse:/srv/www/htdocs/pub/bootstrap # mgr-sync refresh
Refreshing Channels Please enter the credentials of SUSE Manager Administrator.
Login: suseadmin
Password:

[DONE]
Refreshing Channel families [DONE]
Refreshing SUSE products [DONE]
Refreshing SUSE Product channels [DONE]
Refreshing Subscriptions [FAIL]
Error: <Fault -1: ‘redstone.xmlrpc.XmlRpcFault: unhandled internal exception: org.hibernate.exception.ConstraintViolationException: could not execute statement’>

May somebody pls. assist me.

2

I logged a SR and the suggestion was to :
change in the bootstrap scripts:

ORG_CA_CERT=rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm
ORG_CA_CERT_IS_RPM_YN=1

to

ORG_CA_CERT=RHN-ORG-TRUSTED-SSL-CERT
ORG_CA_CERT_IS_RPM_YN=0

and also note, that for SLES11SP3 you should update packages:

libopenssl0_9_8
libopenssl0_9_8-32bit
openssl
openssl-certs

3

Also did create new bootstrap for SLES 15 and it is working now.