Yum fails with 'Problem with the SSL CA cert path? access rights?' on clients registered to Satellite server

Environment

• Red Hat Satellite 6

Issue

• While running yum commands on a host which is registered to Satellite server, it fails with following error.

Content from satellite.example.com is not included.https://satellite.example.com/pulp/repos/org/Library/latest/content/dist/rhel/server/7/7.7/x86_64/os/repodata/repomd.xml:%20[Errno%2014]%20curl#77%20-%20%22Problem%20with%20the%20SSL%20CA%20cert%20(path?%20access%20rights?)%2220with%20the%20SSL%20CA%20cert%20(path?%20access%20rights?)%22> Trying other mirror.

## Resolution

- Remove the `katello-ca-consumer` package from the host and re-install it.

  # rpm -qa | grep katello-ca-consumer

  # rpm -e  katello-ca-consumer-satellite.example.com-1.0-9.noarch

  # curl --insecure --output katello-ca-consumer-latest.noarch.rpm https://satellite.example.com/pub/katello-ca-consumer-latest.noarch.rpm

  # yum localinstall katello-ca-consumer-latest.noarch.rpm

  # subscription-manager clean

  # subscription-manager register
      
  # subscription-manager refresh
       
  # rm -rf /var/cache/yum/*

  # yum repolist

For more KB articles/solutions related to Red Hat Satellite 6.x SSL Certificates Issues, please refer to the [Consolidated Troubleshooting Article for Red Hat Satellite 6.x SSL Certificates Issues](https://access.redhat.com/articles/6433461)

## Root Cause

- Either ca certificates installed from the older katello-ca-consumer are corrupted or the Satellite server has been upgraded to multiple versions.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.