
OPERATIONAL DEFECT DATABASE
...

...
Description of problem: yum commands fail during entitled builds using ubi8 image. ~~~ Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms': Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations: CAfile: %(ca_cert_dir)sredhat-uep.pem ~~~ Version-Release number of selected component (if applicable): How reproducible: 100% Steps to Reproduce: 1. Run a build using ubi8 image and include some yum commands in the build process 2. During the build process, when yum commands are triggered, it fails with the following error: ~~~ Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms': Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations: CAfile: %(ca_cert_dir)sredhat-uep.pem ~~~ 3. It seems like yum/dnf fails to get the value for the variable "%(ca_cert_dir)sredhat-uep.pem" from the RHSM config file. Actual results: Build fails with the error. Expected results: Since proper certificates are in place, builds should be successful. Additional info: Workaround: 1. Edit the rhsm.conf with following entry: ~~~ repo_ca_cert = /etc/rhsm/ca/redhat-uep.pem ~~~ 2. Create a secret or CM & mount it to replace the default rhsm.conf file.
Obsolete
Click on a version to see all relevant bugs
Red Hat Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.