'Re: [Spacewalk-list] The SSL certificate failed verification.'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: spacewalk-list
Subject: Re: [Spacewalk-list] The SSL certificate failed verification.
From: Jonathan Hoser <jonathan.hoser () helmholtz-muenchen ! de>
Date: 2013-09-25 13:20:52
Message-ID: 5242E334.8040805 () helmholtz-muenchen ! de
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Chirag,

that's something I stumbled upon some time ago:
Somehow the curl-libs ... used by the python-layer is invalidating otherwise fine SSL \
certificates;

You can look into this using
URLGRABBER_DEBUG=1 yum update
together with high log-levels in /etc/yum.conf

What I found will resolve the issue, is getting new libcurl versions:
c-ares-1.10.0-1.0.cf.rhel6.x86_64.rpm
curl-7.30.0-2.0.cf.rhel6.x86_64.rpm
libcurl-7.30.0-2.0.cf.rhel6.x86_64.rpm
libssh2-1.4.3-6.0.cf.rhel6.x86_64.rpm

packaged into a file called curlUp.tar, the following (bash) commands will resolve \
the issue (at least it did for me):

tar -xf curlUp.tar

#disable SSL for packages, otherwise we'll fail again right away
sed -i "s/useNoSSLForPackages=0/useNoSSLForPackages=1/g" /etc/sysconfig/rhn/up2date

#install the curl 'update'
yum -y localinstall --nogpgcheck *.rpm

#reenable the SSL for packages
sed -i "s/useNoSSLForPackages=1/useNoSSLForPackages=0/g" /etc/sysconfig/rhn/up2date

Best
-Jonathan

On 09/25/2013 02:35 PM, Chirag Choudhary wrote:
> From Web, and one of them is spacewalk repo for rhel : \
> http://spacewalk.redhat.com/yum/2.0/RHEL/6/x86_64/

Thanks & Regards

On Wed, Sep 25, 2013 at 5:56 PM, Thomas Foster \
<thomas.foster80@gmail.com<mailto:thomas.foster80@gmail.com>> wrote:-- Chirag \
Choudhary, Software Engineer

--
Jonathan Hoser, M.Sc.
Institute of Bioinformatics and System Biology

WWW: http://mips.helmholtz-muenchen.de

________________________________
Helmholtz Zentrum München
Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH)
Ingolstädter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDir´in Bärbel Brumme-Bothe
Geschäftsführer: Prof. Dr. Günther Wess Dr. Nikolaus Blum Dr. Alfons Enhsen
Registergericht: Amtsgericht München HRB 6466
USt-IdNr: DE 129521671

[Attachment #5 (text/html)]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Chirag,<br>
<br>
that's something I stumbled upon some time ago:<br>
Somehow the curl-libs ... used by the python-layer is invalidating otherwise fine SSL \
certificates;<br> <br>
You can look into this using <br>
URLGRABBER_DEBUG=1 yum update<br>
together with high log-levels in /etc/yum.conf<br>
<br>
What I found will resolve the issue, is getting new libcurl versions:<br>
c-ares-1.10.0-1.0.cf.rhel6.x86_64.rpm<br>
curl-7.30.0-2.0.cf.rhel6.x86_64.rpm<br>
libcurl-7.30.0-2.0.cf.rhel6.x86_64.rpm<br>
libssh2-1.4.3-6.0.cf.rhel6.x86_64.rpm<br>
<br>
packaged into a file called curlUp.tar, the following (bash) commands will resolve \
the issue (at least it did for me):<br> <br>
tar -xf curlUp.tar<br>
<br>
#disable SSL for packages, otherwise we'll fail again right away<br>
sed -i &quot;s/useNoSSLForPackages=0/useNoSSLForPackages=1/g&quot; \
/etc/sysconfig/rhn/up2date<br> <br>
#install the curl 'update'<br>
yum -y localinstall --nogpgcheck *.rpm<br>
<br>
#reenable the SSL for packages<br>
sed -i &quot;s/useNoSSLForPackages=1/useNoSSLForPackages=0/g&quot; \
/etc/sysconfig/rhn/up2date<br> <br>
<br>
<br>
Best<br>
-Jonathan<br>
<br>
<br>
On 09/25/2013 02:35 PM, Chirag Choudhary wrote:<br>
</div>
<blockquote cite="mid:CACS8Zr8jZ_9ctv&#43;TYrSdOZQbfXYVWEjYoTDSs9UM&#43;159qVL5FQ@mail.gmail.com" \
type="cite"> <meta http-equiv="Context-Type" content="text/html;
        charset=iso-8859-1">
<div dir="ltr">From Web, and one of them is spacewalk repo for rhel :&nbsp;<a \
moz-do-not-send="true" \
href="http://spacewalk.redhat.com/yum/2.0/RHEL/6/x86_64/">http://spacewalk.redhat.com/yum/2.0/RHEL/6/x86_64/</a>
 <div>&nbsp;</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks &amp; Regards</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Wed, Sep 25, 2013 at 5:56 PM, Thomas Foster <span \
dir="ltr"> &lt;<a moz-do-not-send="true" href="mailto:thomas.foster80@gmail.com" \
target="_blank">thomas.foster80@gmail.com</a>&gt;</span> wrote:-- <br>
</div>
<div dir="ltr">Chirag Choudhary,
<div>Software Engineer</div>
</div>
</div>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">-- 
Jonathan Hoser, M.Sc.
Institute of Bioinformatics and System Biology

WWW: <a class="moz-txt-link-freetext" \
href="http://mips.helmholtz-muenchen.de">http://mips.helmholtz-muenchen.de</a>

</pre>
 
<hr>
Helmholtz Zentrum München 
Deutsches Forschungszentrum für Gesundheit und Umwelt (GmbH) 
Ingolstädter Landstr. 1 
85764 Neuherberg 
www.helmholtz-muenchen.de 
Aufsichtsratsvorsitzende: MinDir´in Bärbel Brumme-Bothe 
Geschäftsführer: Prof. Dr. Günther Wess Dr. Nikolaus Blum Dr. Alfons Enhsen 
Registergericht: Amtsgericht München HRB 6466 
USt-IdNr: DE 129521671 

</body>
</html>

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

[prev in list] [next in list] [prev in thread] [next in thread] 