in Linux_scripts/rhui-check/rhui-check.py [0:0]
def validate_ca_certificates():
"""
Used to verify whether the default certificate database has been modified or not
"""
logger.debug('Entering validate_ca-certificates()')
reinstall_ca_bundle_link = 'https://learn.microsoft.com/troubleshoot/azure/virtual-machines/linux/troubleshoot-linux-rhui-certificate-issues?tabs=rhel7-eus%2Crhel7-noneus%2Crhel7-rhel-sap-apps%2Crhel8-rhel-sap-apps%2Crhel9-rhel-sap-apps#solution-4-update-or-reinstall-the-ca-certificates-package'
try:
result = subprocess.call('/usr/bin/rpm -V ca-certificates', shell=True)
except:
logger.error('Unable to check server side certificates installed in the server')
logger.error('Use {} to reinstall the ca-certificates'.format(reinstall_ca_bundle_link))
exit(1)
if result:
logger.error('The ca-certificate package is invalid, you can reinstall it. Follow {} to reinstall it manually'.format(reinstall_ca_bundle_link))
exit(1)
else:
return True