Enabling repository on Red Hat Satellite 6 fails with certificate verify failed.

Environment

• Red Hat Satellite 6

Issue

• Enabling repository from Satellite web UI: There was an error attempting to retrieve the repository list:
• SSL_connect returned=1 errno=0 state=error: certificate verify failed

Resolution

• Following the mentioned steps we need to refresh the manifest and try enabling the repository again.

# unset http_proxy
# unset https_proxy
# foreman-maintain service restart

• Refresh Manifest Now

Satellite web UI → Click on Content → Red Hat Subscriptions → Manage Manifest → Refresh Manifest.

• Now enable the repository

Satellite web UI > Content -> Red Hat Repositories -> RPMS -> Red Hat Enterprise Linux Server -> Red Hat Enterprise Linux 7 Server (RPMs)

For more KB articles/solutions related to Red Hat Satellite 6.x SSL Certificates Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x SSL Certificates Issues

For more KB articles/solutions related to Red Hat Satellite 6.x Repository Issues, please refer to the Red Hat Satellite Consolidated Troubleshooting Article for Red Hat Satellite 6.x Repository Issues.

Root Cause

• Due to proxy configured on the Satellite server it was not able to reach the CDN server.

Diagnostic Steps

• Check the below steps to ensure if there is a proxy and Satellite server can reach to the CDN (cdn.redhat.com) server.

# grep -iR proxy /etc/foreman
# grep -iR proxy /etc/rhsm/rhsm.conf

• Check the Dynflow console for that task and it should show as a timeout or not reachable.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.