The SSL certificate failed verification

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
thur686
Posts: 66
Joined: Mon Jan 12, 2015 2:33 pm

The SSL certificate failed verification

Post by thur686 »

Hello,

Due to the recent security advisory I am attempting to upgrade our DEV NagiosXI system from 5.4.6 to 5.5.7.

After running /upgrade, a few moments later the script stops with the following message:

The SSL certificate failed verification.

The SSL certificate is good on this server, I have no idea why the upgrade would just halt. Here is a snippet from upgrade.log:

Code: Select all

Nagios XI Upgrade Log
==========================
DATE: Wed Nov 28 10:26:46 EST 2018

DISTRO INFO:
CentOS
6.8
x86_64


Archive:  sourceguardian/ixed4.lin.x86-64.zip
  inflating: /usr/lib64/php/modules/ixed.5.3.lin
Sourceguardian extension found for PHP version 5.3
Sourceguardian extension already in php.ini
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
Checking required prereqs...
Please wait...

OLD VERSION: 5406
Loaded plugins: fastestmirror, rhnplugin, security
Any idea how we can work around this and continue with the 5.5.7 upgrade?

Thanks,
-Paul
npolovenko
Support Tech
Posts: 3457
Joined: Mon May 15, 2017 5:00 pm

Re: The SSL certificate failed verification

Post by npolovenko »

Hello, @thur686. On the Nagios server please run yum update and show me the output.
Can you upload the whole upgrade.log file?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
thur686
Posts: 66
Joined: Mon Jan 12, 2015 2:33 pm

Re: The SSL certificate failed verification

Post by thur686 »

Thank you, it turned out that this Nagios XI server was pointed at a repository that had been decommissioned. After it was pointed to a working repo the upgrade script completed.

The server however did not upgrade from 5.4.6 to 5.5.7, so my troubleshooting continues.
thur686
Posts: 66
Joined: Mon Jan 12, 2015 2:33 pm

Re: The SSL certificate failed verification

Post by thur686 »

The upgrade log is attached.
You do not have the required permissions to view the files attached to this post.
User avatar
lmiltchev
Former Nagios Staff
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: The SSL certificate failed verification

Post by lmiltchev »

The last line in the upgrade.log is:
No package shellinabox available.
This is where the upgrade script failed. The "shellinabox" is provided by the epel repo. Do you have it on your system? Can you run the following command and show the output?

Code: Select all

 yum repolist -v
Be sure to check out our Knowledgebase for helpful articles and solutions!
thur686
Posts: 66
Joined: Mon Jan 12, 2015 2:33 pm

Re: The SSL certificate failed verification

Post by thur686 »

Thanks lmiltchev, you were correct, we do not have the EPEL channel. I've passed this on to the Engineer who owns Satellite and I'm waiting to see what can be done.
User avatar
lmiltchev
Former Nagios Staff
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: The SSL certificate failed verification

Post by lmiltchev »

Let us know if you have any further questions/issues. We will keep the topic open for a while. Thank you!
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked