Getting: Channel import failed, check Altiris Log for detailed information

Products

• Patch Management Solution

Issue/Introduction

Investigate why we can't connect to https://subscription.rhn.redhat.com/subscription via SSL.

When the option to download RHEL 6 patch metadata is selected, the daily import job fails. The customer has extended support for RHEL 6 through Red Hat and have access to any new patches.

The RedHat 6 extended support channel import is failing:

 

In the NS logs we can see some warnings complaining about registering to RedHat right after verifying subscription:

Entry 1:

Verifying RHN subscriptions...
-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683173890 (7.21:46:13.8900000), Size: 258 B
Process: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exe
Priority: 4, Source: PMC:ServiceWorkerItemBase.Send

Entry 2:

Failed to register 'RHEL-X86_64-SERVER-6' (acc9e889-74b7-4814-81cd-ff1378be97a8)

One or more errors occurred.
   [System.AggregateException @ mscorlib]
   at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
   at Altiris.PatchManagementCore.Utilities.Rest.RestClient`1.RequestNoRetry[T,TR](RequestType type, String requestUri, TR& reqResult, T reqSendData, HttpResponseHeaders& responseHeaders)
   at Altiris.PatchManagementCore.Utilities.Rest.RestClient`1.Request[T,TR](RequestType type, String requestUri, TR& reqResult, T reqSendData, HttpResponseHeaders& responseHeaders, Int32 numRetries, Int32 retryTimeout)
   at Altiris.PatchManagementLinux.Redhat.Rhsm.RhsmServer.IsExistsConsumer(Guid consumerId, Consumer& consumer)
   at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository.RegisterRhnSystem(OperationProgressIterator progress, ParallelLoopState state, RedHatVendorPolicy policy, String osName, Guid osGuid, Dictionary`2 resultEnitlement, Int32& inNeedSavePolicy)

Aggregated Exceptions:
An error occurred while sending the request.
   [System.Net.Http.HttpRequestException @ ]

An error occurred while sending the request.
   [System.Net.Http.HttpRequestException @ ]

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
   [System.Net.WebException @ System]
   at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
   at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

The remote certificate is invalid according to the validation procedure.
   [System.Security.Authentication.AuthenticationException @ System]
   at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
   at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)

Exception logged from: 
   at Altiris.PatchManagementCore.Utilities.TaskHelper.HandleTaskException<T>(String, Exception, T, Int32)
   at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository.RegisterRhnSystem(Altiris.PatchManagementCore.Utilities.OperationProgressIterator, System.Threading.Tasks.ParallelLoopState, Altiris.PatchManagementLinux.Redhat.Policies.RedHatVendorPolicy, String, System.Guid, System.Collections.Generic.Dictionary<String,Altiris.PatchManagementLinux.Redhat.Rhsm.RhsmServer+ConsumerEntitlement>, Int32&)
   at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository+<>c__DisplayClass40_1.<RegisterRhnSystems>b__0(System.Collections.Generic.KeyValuePair<String,System.Guid>, System.Threading.Tasks.ParallelLoopState)
   at System.Threading.Tasks.<>c__DisplayClass42_0<TSource,TLocal>.<PartitionerForEachWorker>b__1()
   at System.Threading.Tasks.Task.InnerInvokeWithArg(System.Threading.Tasks.Task)
   at System.Threading.Tasks.Task+<>c__DisplayClass176_0.<ExecuteSelfReplicating>b__0(Object)
   at System.Threading.Tasks.Task.Execute()
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean)
   at System.Threading.Tasks.Task.ExecuteWithThreadLocal(System.Threading.Tasks.Task&)
   at System.Threading.Tasks.Task.ExecuteEntry(Boolean)
   at System.Threading.ThreadPoolWorkQueue.Dispatch()

-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 3.64 KB
Process: AeXSvc (3968), Thread ID: 138, Module: Altiris.PatchManagementCore.dll
Priority: 2, Source: Altiris.PatchManagementCore.Utilities.TaskHelper.HandleTaskException

Entry 3:

Importing RHN channels information
-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 262 B
Process: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exe
Priority: 4, Source: PMC:ServiceWorkerItemBase.Send

Entry 4:

Importing RHN channels information
-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 262 B
Process: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exe
Priority: 4, Source: PMC:ServiceWorkerItemBase.Send

Entry 5:

Please check that RHN licenses and credentials are valid. There is nothing to import
-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 351 B
Process: AeXSvc (3968), Thread ID: 256, Module: Altiris.PatchManagementCore.dll
Priority: 1, Source: PMC:RhnSoftwareRepository.Prepare4ImportChannels

Entry 6:

Channel import failed, check Altiris Log for detailed information.
-----------------------------------------------------------------------------------------------------
Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 317 B
Process: AeXSvc (3968), Thread ID: 256, Module: Altiris.PatchManagementCore.dll
Priority: 1, Source: PMC:LocalizableTaskMessage.Trace

Environment

ITMS 8.6 RU1

Cause

Based on the NS logs, we have the following problem:
when the Import task was trying to update the expired certificate, it could not connect to Red Hat using SSL protocol.

In the logs these errors look like:

Failed to register 'RHEL-X86_64-SERVER-6' (acc9e889-74b7-4814-81cd-ff1378be97a8)

One or more errors occurred.
...

An error occurred while sending the request.
[System.Net.Http.HttpRequestException @ ]

The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
[System.Net.WebException @ System]
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)

The remote certificate is invalid according to the validation procedure.

Resolution

Make sure the proper RedHat certificates are in place.

Verify that the following has been done:

For the following error: "Unable to download Red Hat Linux Channels to start Patch Management Import for Linux, or Patch Management Import fails" Please see KB164373

For the following error: "Red Hat Channel Import Failed - Rhsm: Entitlement isn't valid." KB227724