Upload subscription key fails

Y

Yariv

New Member
Apr 1, 2024
11
0
1
Hi,
When I try from CLI running pvesubscription set (using a proxy server) I get the below error:
WARN: Sending fatal alert BadCertificate
Error checking subscription: https://shop.proxmox.com/modules/servers/licensing/verify.php: Connection Failed: tls connection init failed: invalid peer certificate contents: invalid peer certificate: UnknownIssuer

Using GUI I get: Error checking subscription: https://shop.proxmox.com/modules/servers/licensing/verify.php: Connection Failed: tls connection init failed: invalid peer certificate contents: invalid peer certificate: UnknownIssuer (500)

What can be the issue?
Thanks,
Yariv
 
Can the host access the internet (https://shop.proxmox.com) directly, or is there something in the middle that intercepts the traffic with its own certificate?
If the issue persists, please open a ticket in our support portal at https://my.proxmox.com. There we can figure out what is interfering with the connection.
 
Well, if the proxy is intercepting the HTTPS traffic with its own cert, you either have to add it to the trust store of the hosts or add an exception on the proxy for the requests you see in the error message: https://shop.proxmox.com/modules/servers/licensing/verify.php

If you need further help, please open a ticket at https://my.proxmox.com. There we can discuss this in detail directly without having to fear to potentially leak any infos into a public forum :)
 
Our products are Debian based, therefore any guide on how to deploy a custom root CA to Debian should work.

In short, place the root CA .crt file into /usr/local/share/ca-certificates/ and run update-ca-certificates should do the trick.
 
I guess I need to get the proxy's certificate I guess in that you will not be able to help :(
Thanks anyway.
 
Please open a ticket at https://my.proxmox.com. This might need a bit more troubleshooting than what I want to do via this public forum.
 
You must log in or register to reply here.
Top Bottom