View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0017907CentOS-8ca-certificatespublic2020-12-03 21:232022-11-27 00:55
Reporterbocek.michal Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Product Version8.2.2004 
Summary0017907: Missing Red Hat Certificates
DescriptionThe subscription-manager-rhsm-certificates package is missing the Red Hat certificates which are part of this package when shipped by Red Hat.

Without these certificates, one can't register the system to the standard Red Hat Subscription Management server subscription.rhsm.redhat.com.
Steps To Reproduce# yum install subscription-manager-rhsm-certificates
# ll /etc/rhsm/ca/
total 0
# subscription-manager register
Registering to: subscription.rhsm.redhat.com:443/subscription
Username: <entering valid account username here>
Password:
Unable to verify server's identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)
Additional InformationThis issue appears on CentOS 7 as well, even though there's a workaround: https://bugs.centos.org/view.php?id=14785

The subscription-manager packages provided by CentOS are the only ones shipped publicly. They were expected to be used in the Convert2RHEL project (https://github.com/oamg/convert2rhel/) for converting CentOS 8 to RHEL 8.
TagsNo tags attached.

Relationships

related to 0014785 confirmedIssue Tracker CentOS-7 Missing Red Hat Certificates 

Activities

phracek

phracek

2021-06-10 11:48

reporter   ~0038492

I have similar issues in our CI systems
https://ci.centos.org/job/SCLo-container-container-common-scripts-test/235/console

13:32:29 make[1]: Leaving directory `/root/sources/tests/failures/check'
13:32:29 ./tests/squash/squash.sh
13:32:29 open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory
13:32:30
bocek.michal

bocek.michal

2022-10-25 17:40

reporter   ~0039014

This issue has been fixed. I don't have the rights to close it as done. Anyone who has can close it.

This is the last commit for the latest available subscription-manager-rhsm-certificates package in CentOS Linux 8.5 (https://vault.centos.org/8.5.2111/BaseOS/x86_64/os/Packages/subscription-manager-rhsm-certificates-1.28.21-3.el8.x86_64.rpm):
https://git.centos.org/rpms/subscription-manager/c/1baa100cca55d8715d420a8dc9554bf6e4a365a7?branch=c8

@carlwgeorge used to debrand the package, e.g. here https://git.centos.org/rpms/subscription-manager/c/3940dc1a231042130baac13b8f3a4f990c2926f5?branch=c8 for CentOS Linux 8.4, but he stopped doing that.

Note: The CentOS Linux 7 package is still being debranded: https://git.centos.org/rpms/subscription-manager/c/8ec621ee51490bc8cdbfecb3adbdc84e0eee5be1?branch=c7 (tracked under https://bugs.centos.org/view.php?id=14785).

Issue History

Date Modified Username Field Change
2020-12-03 21:23 bocek.michal New Issue
2020-12-04 00:23 toracat Relationship added related to 0014785
2021-06-10 11:48 phracek Note Added: 0038492
2022-10-25 17:40 bocek.michal Note Added: 0039014
2022-11-27 00:55 toracat Status new => resolved
2022-11-27 00:55 toracat Resolution open => fixed