[RH] Up2date werkt momenteel niet.

[bdegroot]

ik krijg de volgende foutmelding na het invoeren van: up2date -u

There was an SSL error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
A common cause of this error is the system time being incorrect. Verify that the time on this system is correct.


Ik beheer een aantal systemen op verschillende lokaties. Overal is het het geval.
Er moet iets fout zitten bij Redhat update service.


Meer tweakers die dit hebben?

[vandenberg]

Ik kreeg zonet de volgende foutmelding van up2date:

Exception type SSL.Error

Exception Handler Information
Traceback (most recent call last):
File "/usr/bin/../share/rhn/rhn_applet/rhn_applet.py", line 448, in
refresh
self.model.refresh(force)
File "/usr/bin/../share/rhn/rhn_applet/rhn_applet_model.py", line 264,
in refresh
self.__rpc_server__.refresh(force)
File "/usr/bin/../share/rhn/rhn_applet/rhn_applet_rpc.py", line 84, in
refresh
status = server.applet.poll_status()
File "/usr/lib/python2.2/xmlrpclib.py", line 821, in __call__
return self.__send(self.__name, args)
File "/usr/lib/python2.2/site-packages/rhn/rpclib.py", line 126, in
_request
verbose=self._verbose
File "/usr/lib/python2.2/site-packages/rhn/transports.py", line 130,
in request
headers, fd = req.send_http(host, handler)
File "/usr/lib/python2.2/site-packages/rhn/transports.py", line 614,
in send_http
headers=self.headers)
File "/usr/lib/python2.2/httplib.py", line 701, in request
self._send_request(method, url, body, headers)
File "/usr/lib/python2.2/httplib.py", line 723, in _send_request
self.endheaders()
File "/usr/lib/python2.2/httplib.py", line 695, in endheaders
self._send_output()
File "/usr/lib/python2.2/httplib.py", line 581, in _send_output
self.send(msg)
File "/usr/lib/python2.2/httplib.py", line 560, in send
self.sock.sendall(str)
File "/usr/lib/python2.2/site-packages/rhn/SSL.py", line 191, in write
sent = self._connection.send(data)
Error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate
verify failed')]

Komt op hetzelfde neer.

[ Voor 8% gewijzigd door vandenberg op 29-08-2003 09:32 ]

[InZane]

Net ff geprobeerd met RH testservertje.. zelfde fout..

[Wilke]

Ja, dan zal het dus inderdaad wel plat liggen....als ze het niet vanzelf fixen, dan bel je of mail je ze gewoon toch even?

[Verwijderd]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: New up2date available with updated SSL certificate authority file
Advisory ID: RHSA-2003:267-01
Issue date: 2003-08-29
Updated on: 2003-08-29
Product: Red Hat Linux
Keywords: up2date Red Hat Network rhn_register
Cross references:
Obsoletes:
----------------------------------------------------------------------

1. Topic:

New versions of the up2date and rhn_register clients are available and
are required for continued access to Red Hat Network.

2. Relevant releases/architectures:

Red Hat Linux 7.1 - i386
Red Hat Linux 7.2 - i386, ia64
Red Hat Linux 7.3 - i386
Red Hat Linux 8.0 - i386
Red Hat Linux 9 - i386

3. Problem description:

The rhn_register and up2date packages contain the software necessary to
take advantage of Red Hat Network functionality.

This erratum includes an updated RHNS-CA-CERT file, which contains a new CA
certificate. This new certificate is needed so that up2date can continue
to communicate with Red Hat Network after 28 August 2003. Without this
updated certificate, users will see SSL Connection Errors reported by
up2date or rhn_register.

All users must upgrade to these erratum packages in order to continue to
use Red Hat Network. This includes both interactive use of up2date, as
well as actions scheduled by the RHN website.

zou er een private key in verkeerde handen gevallen zijn?

[ Voor 4% gewijzigd door Verwijderd op 29-08-2003 13:57 ]

[Verwijderd]

of gewoon expired.

[Verwijderd]

Gewoon expired:

The certificate used by up2date and rhn_register to communicate with the Red Hat Network reached its end of life on August 28th 2003. Users attempting to connect to Red Hat Network will see SSL connection or certificate verification failures.

New versions of the up2date and rhn_register clients are now available which are required for continued access to Red Hat Network.

* RHSA-2003:267 for Red Hat Linux:
https://rhn.redhat.com/errata/RHSA-2003-267.html

* RHSA-2003:268 for Red Hat Enterprise Linux:
https://rhn.redhat.com/errata/RHSA-2003-268.html

New versions of the up2date client that contain the new certificate are immediately available for download at:

https://rhn.redhat.com/help/latest-up2date.pxt

For users who would prefer to install the new certificate directly, it is available at:

https://rhn.redhat.com/help/ssl_cert.pxt

- -the Red Hat Network Team

[bdegroot]

Slordig hoor redhat!

Terwijl ze nog geen maand geleden een nieuwe bugrelease van up2date hebben uitgegeven. Hadden ze direct het certificaat kunnen updaten lijkt me.
maarja, wie ben ik.

[Wilke]

Inderdaad, best wel slordig ja

Maar goed, problem solved