RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Description of problem:

A customer cannot send a bug report to Customer Portal when exception occurs in anaconda. They saw the following error.

 "Case Creation Failed"
 error: problem: curl_easy_perform: Peer certificate cannot be authenticated with known CA certificates.

Certainly, there is no certificate information in /etc/report.d/RHEL.conf.
When I added "sslcertdata = INSECURE" in /etc/report.d/RHEL.conf, a new case was created properly in Customer Portal. But, I guess that an appropriate certificate for Customer Portal is written in it.

Version-Release number of selected component (if applicable):
RHEL6.0
report-0.18-7.el6
anaconda-13.21.82-1.el6

How reproducible:
Always

Steps to Reproduce:
1. make any exception occur during installation
2. choose Save button in exeception dialog
3. choose Red Hat Global Support as a destination to send the report
4. choose Create Case
5. input login account and password of Customer Protal
  
Actual results:
A new case is not created.

Expected results:
A new case is created.

Additional info:

What installation method was used when this was reproduced (DVD, NFS, HTTP, etc)?

I used http installation.

I'm reassigning this to Anaconda.  This code is using libcurl and libssl to communicate with RHT (api.access.redhat.com).  The error message indicates that either libcurl or libssl within the installer can't find the CA certs, or the CA certs don't contain the needed cert for api.access.redhat.com.  This code works fine on installed RHEL6.

What package and what files in that package contain the certs needed?

This could be a dup of 667122. Masahiro can you retest with libnsspem.so in /usr/lib* directory of the install image? The howto-do-that is described here:

https://bugzilla.redhat.com/show_bug.cgi?id=667122#c8

Thanks.
Ales

Hi Ales,

I added libnsspem.so into install.img, and I confirmed I could report a bug to Customer Portal without any errors.

Thanks!

Masahiro

*** This bug has been marked as a duplicate of bug 667122 ***

Masahiro,

Thanks for confirming this. The 667122 fix (and thus fix for this bug) is coming soon.