I just rebuilt my spacewalk this morning (couldnt keep track of all the things 
i tried).

I copied /etc/rhsm/ca/redhat-uep.pem to /usr/share/pki/ca-trust-source/anchors/

ran update-ca-trust


tried to sync repo


spacewalk-repo-sync --channel rhel7_server
11:39:26 ======================================
11:39:26 | Channel: rhel7_server
11:39:26 ======================================
11:39:26 Sync of channel started.
11:39:26
11:39:26   Processing repository with URL: 
https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os
​11:39:26 ERROR: failure: repodata/repomd.xml from rhel7_server_rpms_x86_64: 
[Errno 256] No more mirrors to try.
https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os/repodata/repomd.xml:
 [Errno 14] HTTPS Error 403 - Forbidden
11:39:26 Sync of channel completed in 0:00:00.
11:39:26 Total time: 0:00:00





________________________________
From: spacewalk-list-boun...@redhat.com <spacewalk-list-boun...@redhat.com> on 
behalf of Raymond Setchfield <raymond.setchfi...@gmail.com>
Sent: Tuesday, October 9, 2018 8:36 AM
To: spacewalk-list@redhat.com
Subject: Re: [Spacewalk-list] RHEL repo sync error - CURL #60

Hi Jeffrey

Hopefully getting closer to resolving the problem.

copy the redhat-uep.pem to your spacewalk server to the following location
#> /usr/share/pki/ca-trust-source/anchors/redhat-uep.pem
run
#> update-ca-trust

This will resolve the trust issue, but now I am receiving an issue when 
attempting to run the sync. Getting a 403 forbidden message.

[root@spacewalk ~]# spacewalk-repo-sync -c rhel07-update
13:32:44 ======================================
13:32:44 | Channel: rhel07-update
13:32:44 ======================================
13:32:44 Sync of channel started.
13:32:44
13:32:44   Processing repository with URL: 
https://<username>:<password>@cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os<http://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os>
Repository group_spacewalkproject-java-packages is listed more than once in the 
configuration
13:32:44 ERROR: failure: repodata/repomd.xml from rhel07-update.repo: [Errno 
256] No more mirrors to try.
https://<username>:<password>@cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml<http://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml>:
 [Errno 14] HTTPS Error 403 - Forbidden
13:32:45 Sync of channel completed in 0:00:00.
13:32:45 Total time: 0:00:00
[root@spacewalk ~]#

Thanks

Ray


On Tue, Oct 9, 2018 at 1:05 PM Irwin, Jeffrey 
<jeffrey.ir...@rivertechllc.com<mailto:jeffrey.ir...@rivertechllc.com>> wrote:

​Same issue I ma having, interested to see the solution.

________________________________
From: 
spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com> 
<spacewalk-list-boun...@redhat.com<mailto:spacewalk-list-boun...@redhat.com>> 
on behalf of Raymond Setchfield 
<raymond.setchfi...@gmail.com<mailto:raymond.setchfi...@gmail.com>>
Sent: Monday, October 8, 2018 6:47 AM
To: spacewalk-list@redhat.com<mailto:spacewalk-list@redhat.com>
Subject: [Spacewalk-list] RHEL repo sync error - CURL #60

Hi

I have been attempting to pull the RHEL updates into spacewalk, and I am 
receiving the following error;

# spacewalk-repo-sync -c rhel07-update
11:44:03 ======================================
11:44:03 | Channel: rhel07-update
11:44:03 ======================================
11:44:03 Sync of channel started.
11:44:03
11:44:03   Processing repository with URL: 
https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os
Repository group_spacewalkproject-java-packages is listed more than once in the 
configuration
11:44:03 ERROR: failure: repodata/repomd.xml from rhel07-update.repo: [Errno 
256] No more mirrors to try.
https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml:
 [Errno 14] curl#60 - "Peer's certificate issuer has been marked as not trusted 
by the user."
11:44:03 Sync of channel completed in 0:00:00.
11:44:03 Total time: 0:00:00

Looking into this it appears to be a certificate issue from what I can gather. 
My assumption is to use the "redhat-uep.pem" Is this correct? If so where do I 
place this to allow the curl to work? Or am I off in the wrong direction

Thanks

Ray




_______________________________________________
Spacewalk-list mailing list
Spacewalk-list@redhat.com<mailto:Spacewalk-list@redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

Reply via email to