cluster image package get -> Error: Peer certificate cannot be authenticated with given CA certi

[thokelly]

Hello,

tried to download an update package from a local web server and ran into this certificate error:

cluster image package get -url http://webserver:/93P1_q_image.tgz

Package download failed.

Error: command failed: Failed to download package from http://.../93P1_q_image.tgz.

Error: Peer certificate cannot be authenticated with given CA certificates : SSL certificate problem: self signed certificate"

This happens on a 9.3 cluster and on a 9.1 cluster...

It used to work a couple of weerks ago when I downloaded and updated from 9.1 to 9.3 ...

How to fix?

/Tom

[Sahana]

Hi,

Seems like there is a communication issue. Please refer Error 2 in KB https://kb.netapp.com/app/answers/answer_view/a_id/1028719

[Banji]

Would you mind sharing how you fixed this issue? I am having the same problem and I dont seem to be able to find other resources out there for the exact same issue.

[greggles]

---

@Banji wrote:

Would you mind sharing how you fixed this issue? I am having the same problem and I dont seem to be able to find other resources out there for the exact same issue.

---

I had the same error - I believe it was fixed by installing the CA Chain associated with the certificate we were using on the web server that hosted the image.

> certificate install -type server-ca