Issue while trying to patch SUSE Server AWS

Ask Time：2021-06-09T02:04:43 Author：X-Men

I'm really stuck with this for a while now so thought of reaching out to wider audience to see if anyone face a similar issue.

I'm trying to patch SLES server 15-SP1, but I'm not able to. I see below error in the logs.

====Cloudregister Logs====

2021-06-08 14:23:00,314 INFO:Forced new registration
2021-06-08 14:23:00,321 INFO:No current registration server set.
2021-06-08 14:23:00,322 INFO:Using API: regionInfo
2021-06-08 14:23:00,328 INFO:Region server arguments: ?regionHint=me-south-1
2021-06-08 14:23:00,328 INFO:Getting update server information, attempt 1
2021-06-08 14:23:00,328 INFO:   Using region server: 54.223.148.145
2021-06-08 14:23:01,346 INFO:No current registration server set.
2021-06-08 14:23:01,373 INFO:Modified /etc/hosts, added: 157.175.6.182  smt-ec2.susecloud.net   smt-ec2

2021-06-08 14:23:02,674 INFO:Writing SMT rootCA: /usr/share/pki/trust/anchors
2021-06-08 14:23:02,689 INFO:Updating CA certificates: update-ca-certificates
2021-06-08 14:23:03,211 ERROR:Registration with ('157.175.6.182', None) failed. Trying ('15.185.47.44', None)
2021-06-08 14:23:03,211 INFO:Clean current registration server: ('157.175.6.182', None)
2021-06-08 14:23:03,212 INFO:Modified /etc/hosts, added: 15.185.47.44   smt-ec2.susecloud.net   smt-ec2

2021-06-08 14:23:03,432 ERROR:Registration with ('15.185.47.44', None) failed. Trying ('157.175.138.207', None)
2021-06-08 14:23:03,432 INFO:No current registration server set.
2021-06-08 14:23:03,432 INFO:Modified /etc/hosts, added: 157.175.138.207        smt-ec2.susecloud.net   smt-ec2

2021-06-08 14:23:03,646 ERROR:Baseproduct registration failed
2021-06-08 14:23:03,646 ERROR:  Registering system to registration proxy https://smt-ec2.susecloud.net

Announcing system to https://smt-ec2.susecloud.net ... SSL verification failed: unable to get local issuer certificate Certificate issuer: /C=DE/ST=Bavaria/L=Nuremberg/O=SUSE/OU=CSM/CN=SUSE/[email protected] Certificate subject: /C=DE/ST=Bavaria/L=Nuremberg/O=SUSE/OU=Public Cloud/CN=Update server certificate (smt-ec2.susecloud.net)/[email protected] SUSEConnect error: OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate)

====================================================================

Any help or lead is appreciated.

Thanks

Author:X-Men，eproduced under the CC 4.0 BY-SA copyright license with a link to the original source and this disclaimer.
Link to original article：https://stackoverflow.com/questions/67892387/issue-while-trying-to-patch-suse-server-aws

mspbgx :

this steps can help you:\n\ndownload the ssl certificate to local machine (with openssl)\n\necho -n | openssl s_client -connect smt-ec2.susecloud.net:443 -servername smt-ec2.susecloud.net\\\n | openssl x509 > /tmp/smt-ec2.susecloud.net.cert\n\n\ncopy the certificate\n\ncp /tmp/smt-ec2.susecloud.net.cert /etc/pki/trust/anchors/\n\n\nimport the certificate:\n\nupdate-ca-certificates\n",

2021-06-08T18:27:03

Issue while trying to patch SUSE Server AWS