Unable open ssl config file for writing

sahostking

Verified User
Joined
Jan 29, 2021
Messages
110
Location
South Africa
Seeing tons of messages on servers with errors like:

Error during automated certificate renewal for​


and

Unable open ssl config file for writing

Any ideas what these are?
 
yes fully updated and 2.0.0 (rev: 2839)

When I run:
trust list | grep -A2 -B2 'X3'

type: certificate
label: DST Root CA X3
trust: anchor
category: authority

So that seems wrong

But then running:

Code:
[root@da-3 ~]# yum update ca-certificates

This system is receiving updates from CloudLinux Network server.

Last metadata expiration check: 1:54:44 ago on Thu 10 Feb 2022 09:30:45 PM SAST.

Dependencies resolved.

Nothing to do.

Complete!


I even tried:

Code:
[root@da-3 ~]# yum reinstall ca-certificates
This system is receiving updates from CloudLinux Network server.
Last metadata expiration check: 1:55:07 ago on Thu 10 Feb 2022 09:30:45 PM SAST.
Dependencies resolved.
=====================================================================================================================================================================================================================================================================================
 Package                                                               Architecture                                                 Version                                                                       Repository                                                    Size
=====================================================================================================================================================================================================================================================================================
Reinstalling:
 ca-certificates                                                       noarch                                                       2021.2.50-80.0.el8_4                                                          baseos                                                       389 k

Transaction Summary
=====================================================================================================================================================================================================================================================================================

Total download size: 389 k
Installed size: 908 k
Is this ok [y/N]: y
Downloading Packages:
ca-certificates-2021.2.50-80.0.el8_4.noarch.rpm                                                                                                                                                                                                      673 kB/s | 389 kB     00:00
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                                                                                                193 kB/s | 389 kB     00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                                                                                                             1/1
  Running scriptlet: ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 1/2
  Reinstalling     : ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 1/2
  Running scriptlet: ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 1/2
  Cleanup          : ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 2/2
  Running scriptlet: ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 2/2
  Verifying        : ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 1/2
  Verifying        : ca-certificates-2021.2.50-80.0.el8_4.noarch                                                                                                                                                                                                                 2/2

Reinstalled:
  ca-certificates-2021.2.50-80.0.el8_4.noarch

Complete!
[root@da-3 ~]# trust list | grep -A2 -B2 'X3'

    type: certificate
    label: DST Root CA X3
    trust: anchor
    category: authority
 
what happens if you run

Code:
rpm -q -changelog ca-certificates | head -5
update-ca-trust
 
[root@da-2 ~]# rpm -q -changelog ca-certificates | head -5
* Wed Jun 16 2021 Bob Relyea <[email protected]> - 2021.2.50-80.0
- Update to CKBI 2.50 from NSS 3.67
- version number update only

* Fri Jun 11 2021 Bob Relyea <[email protected]> - 2021.2.48-80.0
[root@da-2 ~]# update-ca-trust
[root@da-2 ~]# trust list | grep -A2 -B2 'X3'
pkcs11:id=%C4%A7%B1%A4%7B%2C%71%FA%DB%E1%4B%90%75%FF%C4%15%60%85%89%10;type=cert
type: certificate
label: DST Root CA X3
trust: anchor
category: authority
 
Back
Top