SUSEConnect error tls unsupported protocol version 301

This document (000021390) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12

Situation

Running "SUSEConnect" returns error:

SUSEConnect  -l
SUSEConnect error: Get "https://sles12smt.suse/connect/systems/activations": tls: server selected unsupported protocol version 301

Resolution

Ensure that TLSv1.2 or higher is available on the RMT or SMT web server.

For RMT:

Check the file:
/etc/nginx/vhosts.d/rmt-server-https.conf
Line:
ssl_protocols       TLSv1.2 TLSv1.3;

For SMT:

Check the file:
/etc/apache2/vhosts.d/vhost-ssl.conf
Line:
SSLProtocol all -SSLv2 -SSLv3 -TLSv1

Cause

Newer "suseconnect-ng" versions are implemented in Golang.
It communicates with the registration server using a RESTful JSON API over HTTP using TLS encryption.
The Golang TLS does not support versions less than TLSv1.2.

Additional Information

The newer "suseconnect-ng-1.7.0~git0.5338270-3.9.1" in SLES12-SP5 will not work with SMT from SLES11, nor if SMT does not allow TLSv1.2 or above. Older "SUSEConnect-0.3.36-3.18.4" versions will work.

To downgrade to the older SUSEConnect, remove these three packages:

suseconnect-ng
libsuseconnect
suseconnect-ruby-bindings

Then downgrade to or install these three packages:

SUSEConnect              0.3.36-3.18.4
zypper-migration-plugin  0.10-12.4
yast2-registration  3.3.1-3.3.5

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000021390
Creation Date: 07-Mar-2024
Modified Date:11-Mar-2024
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com