SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

Solution Unverified - Updated 14 Jun 2024

Environment

Red Hat Satellite 6.4

Issue

Getting error messages after sync of container image/manifests.
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

Resolution

Remove requests-2.8.0-py2.7.egg

Install python-requests-2.6.0-1.el7_1.noarch
# yum install python-requests-2.6.0-1.el7_1.noarch

For more KB articles/solutions related to Red Hat Satellite 6.x SSL Certificates Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x SSL Certificates Issues

For more KB articles/solutions related to Red Hat Satellite 6.x Repository Issues, please refer to the Red Hat Satellite Consolidated Troubleshooting Article for Red Hat Satellite 6.x Repository Issues.

Root Cause

requests-2.8.0-py2.7.egghad been installed and it is not shipped by Red Hat in a default installation of Red Hat Satellite.

On a default Satellite 6.4 this version is installed:

# rpm -qa | grep python-requests
python-requests-2.6.0-1.el7_1.noarch

In addition, this part of /usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/certs.py is absent.

# cat /usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/certs.py

try:
    from certifi import where
except ImportError:
    def where():
        """ Don't use the certs bundled with requests, use ca-certificates. """
        return "/etc/pki/tls/certs/ca-bundle.crt"

Diagnostic Steps

From the error message, it is seen that requests-2.8.0-py2.7.egg is installed.

Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) HTTP Notification Failed
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) HTTP Notification Failed
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) Traceback (most recent call last):
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) Traceback (most recent call last):
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/pulp/server/event/http.py", line 57, in _send_post
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/pulp/server/event/http.py", line 57, in _send_post
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     headers={'Content-Type': 'application/json'}, timeout=15)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     headers={'Content-Type': 'application/json'}, timeout=15)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/api.py", line 109, in post
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/api.py", line 109, in post
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     return request('post', url, data=data, json=json, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     return request('post', url, data=data, json=json, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/api.py", line 50, in request
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/api.py", line 50, in request
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     response = session.request(method=method, url=url, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     response = session.request(method=method, url=url, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/sessions.py", line 471, in request
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/sessions.py", line 471, in request
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     resp = self.send(prep, **send_kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     resp = self.send(prep, **send_kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/sessions.py", line 579, in send
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/sessions.py", line 579, in send
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     r = adapter.send(request, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     r = adapter.send(request, **kwargs)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/adapters.py", line 430, in send
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)   File "/usr/lib/python2.7/site-packages/requests-2.8.0-py2.7.egg/requests/adapters.py", line 430, in send
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     raise SSLError(e, request=request)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>)     raise SSLError(e, request=request)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)
Nov  4 09:46:01 satellite pulp: pulp.server.event.http:ERROR: [0e9097ed] <rc-c2d-number data-rc-number="(121542-02016">(121542-02016</rc-c2d-number>) SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

SBR

SysMgmt

Product(s)

Red Hat Satellite

Category

Configure

Tags

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.