Investigate why the Notification Server can't connect to https://subscription.rhn.redhat.com/subscription via SSL.
When the option to download RHEL 6 patch metadata is selected, the daily import job fails. The admin has extended support for RHEL 6 through Red Hat and has access to any new patches.
The RedHat 6 extended support channel import is failing:
In the NS logs we can see some warnings complaining about registering to RedHat right after verifying subscription:
Entry 1:
Verifying RHN subscriptions...-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683173890 (7.21:46:13.8900000), Size: 258 BProcess: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exePriority: 4, Source: PMC:ServiceWorkerItemBase.Send
Entry 2:
Failed to register 'RHEL-X86_64-SERVER-6' (acc9e889-74b7-4814-81cd-ff1378be97a8)
One or more errors occurred. [System.AggregateException @ mscorlib] at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification) at Altiris.PatchManagementCore.Utilities.Rest.RestClient`1.RequestNoRetry[T,TR](RequestType type, String requestUri, TR& reqResult, T reqSendData, HttpResponseHeaders& responseHeaders) at Altiris.PatchManagementCore.Utilities.Rest.RestClient`1.Request[T,TR](RequestType type, String requestUri, TR& reqResult, T reqSendData, HttpResponseHeaders& responseHeaders, Int32 numRetries, Int32 retryTimeout) at Altiris.PatchManagementLinux.Redhat.Rhsm.RhsmServer.IsExistsConsumer(Guid consumerId, Consumer& consumer) at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository.RegisterRhnSystem(OperationProgressIterator progress, ParallelLoopState state, RedHatVendorPolicy policy, String osName, Guid osGuid, Dictionary`2 resultEnitlement, Int32& inNeedSavePolicy)
Aggregated Exceptions:An error occurred while sending the request. [System.Net.Http.HttpRequestException @ ]
An error occurred while sending the request. [System.Net.Http.HttpRequestException @ ]
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. [System.Net.WebException @ System] at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult) at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
The remote certificate is invalid according to the validation procedure. [System.Security.Authentication.AuthenticationException @ System] at System.Net.TlsStream.EndWrite(IAsyncResult asyncResult) at System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)
Exception logged from: at Altiris.PatchManagementCore.Utilities.TaskHelper.HandleTaskException<T>(String, Exception, T, Int32) at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository.RegisterRhnSystem(Altiris.PatchManagementCore.Utilities.OperationProgressIterator, System.Threading.Tasks.ParallelLoopState, Altiris.PatchManagementLinux.Redhat.Policies.RedHatVendorPolicy, String, System.Guid, System.Collections.Generic.Dictionary<String,Altiris.PatchManagementLinux.Redhat.Rhsm.RhsmServer+ConsumerEntitlement>, Int32&) at Altiris.PatchManagementLinux.Redhat.RhnSoftwareRepository+<>c__DisplayClass40_1.<RegisterRhnSystems>b__0(System.Collections.Generic.KeyValuePair<String,System.Guid>, System.Threading.Tasks.ParallelLoopState) at System.Threading.Tasks.<>c__DisplayClass42_0<TSource,TLocal>.<PartitionerForEachWorker>b__1() at System.Threading.Tasks.Task.InnerInvokeWithArg(System.Threading.Tasks.Task) at System.Threading.Tasks.Task+<>c__DisplayClass176_0.<ExecuteSelfReplicating>b__0(Object) at System.Threading.Tasks.Task.Execute() at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, Object, Boolean) at System.Threading.Tasks.Task.ExecuteWithThreadLocal(System.Threading.Tasks.Task&) at System.Threading.Tasks.Task.ExecuteEntry(Boolean) at System.Threading.ThreadPoolWorkQueue.Dispatch()
-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 3.64 KBProcess: AeXSvc (3968), Thread ID: 138, Module: Altiris.PatchManagementCore.dllPriority: 2, Source: Altiris.PatchManagementCore.Utilities.TaskHelper.HandleTaskException
Entry 3:
Importing RHN channels information-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 262 BProcess: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exePriority: 4, Source: PMC:ServiceWorkerItemBase.Send
Entry 4:
Importing RHN channels information-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 262 BProcess: AeXSvc (3968), Thread ID: 256, Module: AeXSVC.exePriority: 4, Source: PMC:ServiceWorkerItemBase.Send
Entry 5:
Please check that RHN licenses and credentials are valid. There is nothing to import-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 351 BProcess: AeXSvc (3968), Thread ID: 256, Module: Altiris.PatchManagementCore.dllPriority: 1, Source: PMC:RhnSoftwareRepository.Prepare4ImportChannels
Entry 6:
Channel import failed, check Altiris Log for detailed information.-----------------------------------------------------------------------------------------------------Date: 11/3/2021 12:45:32 PM, Tick Count: 683174593 (7.21:46:14.5930000), Size: 317 BProcess: AeXSvc (3968), Thread ID: 256, Module: Altiris.PatchManagementCore.dllPriority: 1, Source: PMC:LocalizableTaskMessage.Trace
ITMS 8.6 RU1
Based on the NS logs, we have the following problem:
When the Import task was trying to update the expired certificate, it could not connect to Red Hat using SSL protocol.
In the logs these errors look like:
Failed to register 'RHEL-X86_64-SERVER-6' (acc9e889-74b7-4814-81cd-ff1378be97a8)
One or more errors occurred....
An error occurred while sending the request.[System.Net.Http.HttpRequestException @ ]
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.[System.Net.WebException @ System]at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
The remote certificate is invalid according to the validation procedure.
Make sure the proper RedHat certificates are in place.
Verify that the following has been done:
For the following error, please see: Unable to download Red Hat Linux Channels to start Patch Management Import for Linux, or Patch Management Import fails.
For the following error, please see: Getting: Channel import failed, check Altiris Log for detailed information