Red Hat Capsule server sync is failing with Failure:ERF50-5345 [Foreman::WrappedException]: Unable to connect.

Environment

• Red Hat Satellite 6.x
• Red Hat Capsule 6.x

Issue

• SSL issues are seen in the Web UI under Infrastructure -> Capsules

SSL_connect returned=1 errno=0 state=error: certificate verify failed (self signed certificate in certificate chain)

Failure:ERF50-5345 [Foreman::WrappedException]: Unable to connect ([ProxyAPI::ProxyException]:ERF12-7885[ProxyAPI::ProxyException]:Unable to fetch logs ([RestClient::SSLCertificateNotVerified]:SSL_connect returned=1 errno=0 state=error: certificate verify failed (self signed certificate in certificate chain) for Capsule https://capsulehostname:9090/logs

For more KB articles/solutions related to Red Hat Satellite 6.x Capsule Sync Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x Capsule Sync Issues

Resolution

• Make sure the Red Hat Capsule packages are not removed and the services are up and running fine .

[root@capsule ~]# rpm -qa | grep capsule
satellite-capsule-6.5.el7sat.noarch

Root Cause

• The packages were manually removed from the server and the configuration was deleted.
• Reinstalling the packages and running the capsule configurations fixed the issue.

Diagnostic Steps

• The below errors were seen in the server.

# subscription-manager identity

Unable to verify server's identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

• Capsule packages were removed from the server.

# grep capsule /var/log/yum.log*
  /var/log/yum.log Jul 09 20:13:46 Erased: satellite-capsule-6.5.1-1 
 .el7sat.noarch

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.