Unable to pull images from vSphere with Tanzu's Subscribed Content Library with the error "A general system error occurred: HTTP request error: cannot authenticate SSL certificate for host wp-content.vmware.com."

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:
Customers start to see the following task fail in vSphere. 



In the vmop pod logs you also will see

2024-03-08T00:53:52.148847094Z stderr F E0308 00:53:52.148820 1 contentsource_controller.go:343] controllers/ContentSource "msg"="failed to difference images" "error"="Error exporting file ubuntu-ova.ovf. Reason: HTTP request error: cannot authenticate SSL certificate for host wp-content.vmware.com."

Environment

VMware vCenter Server 8.x
VMware vCenter Server 7.x

Cause

This is due to a Cert Change VMware pushed to wp-content.vmware.com 

Due to the fact that this is using a subscribed content library, it will no longer trust any subscribed library after a cert change.

Resolution

Access the Content Libraries page from the Menu.



Find the subscribed content library for wp-content.vmware.com, right click the library, and click edit.



Then, without making any changes, click OK. After this a red banner log below will appear, click Actions to trust the new cert. It will prompt you to trust the new certificate. Hit Ok to finalize the change.




After this wait 10-15 minutes for VMOP to automatically pull the now trusted images back to the supervisor cluster.