Registration in SUSE Manager is aborted with SSL/certificate error.
This document (7018600) is provided subject to the disclaimer at the end of this document.
SUSE Manager 2.1
SUSE Manager 1.7
When trying to register a client to SUSE Manager, the registration process is interrupted with an error similar to this one:
Retrieving repository 'repo_name' Download (curl) error for 'https://susemanagerserver.yourdomain.net/XMLRC/GET-REQ/repo-name/repodata/repomd.xml?head_requests=no': Error code: Unrecognized error Error message: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Abort, retry, ignore? [a/r/i/?] (a):
This is likely to happen in an older, unsupported (or supported by LTSS) version of SLES, for instance, SLES 11 SP3 or older. It can also happen in newer (even supported) versions, after a migration from SUSE Manager 2.1 to 3.0.
Then, the script should be edited, doing the usual changes:
But this time, also the following lines should be changed to look like this:
Should the following lines exist, they need to be commented (although updating the bootstrap script should have deleted them, so the following step wouldn't normally be needed ):
#echo "* removing TLS certificate used for bootstrap"
#echo " (will be re-added via salt state)"
Additionally, and specially in the case of old unsupported releases, the following packages should be updated:
While this is a nice thought, right now it causes the issue described for traditional clients.
Outdated versions of openssl can also cause this SSL certificate error. Unless a newer version of openssl is installed, the problem cannot be bypassed.
Regarding the openssl versions, similar errors are known to happen with SMT (Subscription Management Tool) or direct registration through suse_register. The solution is the same, however the way to get the updates can differ.
This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:7018600
- Creation Date: 08-Feb-2017
- Modified Date:03-Mar-2020
- SUSE Manager
For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com