Home‎ > ‎Server config‎ > ‎

RHN - Redhat certificate expired fix

  • Yum commands fail with below error message:

    [root@system ~]# yum updateLoaded plugins: product-id, rhnplugin, security, subscription-managerThe certificate /usr/share/rhn/RHNS-CA-CERT is expired. Please ensure you have the correct certificate and your system time is correct.

Resolution

Note: RHN Classic is completely deprecated, hence systems registered to RHN are no longer able to check in or receive updates as of April 2018]

  • Disable RHN Classic registration.

    # mv /etc/sysconfig/rhn/systemid  /etc/sysconfig/rhn/systemid.EOL# sed -i 's/enabled = 1/enabled = 0/g' /etc/yum/pluginconf.d/rhnplugin.conf

Diagnostic Steps

  • /usr/share/rhn/RHNS-CA-CERT has expired on Feb 24, 2020

    #  awk -v cmd='openssl x509 -noout -subject -issuer -dates' ' /BEGIN/{close(cmd)};{print | cmd}' < /usr/share/rhn/RHNS-CA-CERT subject= /C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.comissuer= /C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.comnotBefore=Aug 29 02:10:55 2003 GMTnotAfter=Aug 26 02:10:55 2013 GMTsubject= /C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.comissuer= /C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=RHN Certificate Authority/emailAddress=rhn-noc@redhat.comnotBefore=Feb 26 21:07:08 2010 GMTnotAfter=Feb 24 21:07:08 2020 GMT