Page 1 of 1

The SSL certificate failed verification

Posted: Wed Nov 28, 2018 11:04 am
by thur686
Hello,

Due to the recent security advisory I am attempting to upgrade our DEV NagiosXI system from 5.4.6 to 5.5.7.

After running /upgrade, a few moments later the script stops with the following message:

The SSL certificate failed verification.

The SSL certificate is good on this server, I have no idea why the upgrade would just halt. Here is a snippet from upgrade.log:

Code: Select all

Nagios XI Upgrade Log
==========================
DATE: Wed Nov 28 10:26:46 EST 2018

DISTRO INFO:
CentOS
6.8
x86_64


Archive:  sourceguardian/ixed4.lin.x86-64.zip
  inflating: /usr/lib64/php/modules/ixed.5.3.lin
Sourceguardian extension found for PHP version 5.3
Sourceguardian extension already in php.ini
Stopping httpd:                                            [  OK  ]
Starting httpd:                                            [  OK  ]
Checking required prereqs...
Please wait...

OLD VERSION: 5406
Loaded plugins: fastestmirror, rhnplugin, security
Any idea how we can work around this and continue with the 5.5.7 upgrade?

Thanks,
-Paul

Re: The SSL certificate failed verification

Posted: Wed Nov 28, 2018 5:09 pm
by npolovenko
Hello, @thur686. On the Nagios server please run yum update and show me the output.
Can you upload the whole upgrade.log file?

Re: The SSL certificate failed verification

Posted: Mon Dec 03, 2018 3:24 pm
by thur686
Thank you, it turned out that this Nagios XI server was pointed at a repository that had been decommissioned. After it was pointed to a working repo the upgrade script completed.

The server however did not upgrade from 5.4.6 to 5.5.7, so my troubleshooting continues.

Re: The SSL certificate failed verification

Posted: Mon Dec 03, 2018 3:33 pm
by thur686
The upgrade log is attached.

Re: The SSL certificate failed verification

Posted: Mon Dec 03, 2018 3:42 pm
by lmiltchev
The last line in the upgrade.log is:
No package shellinabox available.
This is where the upgrade script failed. The "shellinabox" is provided by the epel repo. Do you have it on your system? Can you run the following command and show the output?

Code: Select all

 yum repolist -v

Re: The SSL certificate failed verification

Posted: Tue Dec 04, 2018 2:20 pm
by thur686
Thanks lmiltchev, you were correct, we do not have the EPEL channel. I've passed this on to the Engineer who owns Satellite and I'm waiting to see what can be done.

Re: The SSL certificate failed verification

Posted: Tue Dec 04, 2018 2:54 pm
by lmiltchev
Let us know if you have any further questions/issues. We will keep the topic open for a while. Thank you!