Online depot download/sync up fail in vCenter Server 7.0 U1c

Products

• VMware vCenter Server

Issue/Introduction

This article provides solution for signed online depot download issue in vsphere 7.0U1

Symptoms:

• Online depot download/sync up may fail if the depot content are signed.
• In the /var/log/vmware/vmware-updatemgr/vum-server/imageservice.log, you see similar to:

ImageService: 26749: 2021-02-18 08:07:01,155 DepotCollection:328 INFO Could not download from depot at https://vCenter_Server:3512/static/vsphere-web-client/Service%20Pack%20for%20Synergy-SY-20.4/index.xml, skipping (('https://vCenter_Server:3512/static/vsphere-web-client/Service%20Pack%20for%20Synergy-SY-20.4/index.xml', '', 'HTTPSConnectionPool(host=\'vCenter_Server\', port=3512): Max retries exceeded with url: /static/vsphere-web-client/Service%20Pack%20for%20Synergy-SY-20.4/index.xml (Caused by SSLError(SSLError("bad handshake: Error([(\'SSL routines\', \'ssl3_get_server_certificate\', \'certificate verify failed\')])")))'))

Environment

VMware vCenter Server 7.0.x

Resolution

This issue is resolved in vCenter Server U2. For more information, see VMware vCenter Server 7.0 Update 2 Release Notes.

 

Workaround:
To resolve issues adding depots to the vCenter Server:

1. Download the attached Downloader.py and transfer to the vCenter Server.
2. Copy Downloader.py to /usr/lib/vmware-imagebuilder/site-packages/vmware/esximage/Downloader.py
3. Change the owner with this command: chown imagebuilder:cis Downloader.py
4. Restart the update manager service:

service-control --stop vmware-updatemgr
service-control --start vmware-updatemgr