curl/zypper fail with DEFAULT_SUSE error after upgrade to NAM 4.4 on SLES 12 SP1,SP2

  • 7021958
  • 02-Oct-2017
  • 19-Oct-2017

Environment

NetIQ Access Manager 4.4

Situation

curl/zypper on SLES 12 SP1, SP2 with NAM 4.2.2 working fine. After upgrading to NAM 4.4 which comes with eDirectory 9.0.3, these commands fail with DEFAULT_SUSE error.

 

               44sles12sp2:~ # curl https://www.google.com

curl: (59) failed setting cipher list: DEFAULT_SUSE

 

44sles12sp2:~ # zypper up

Refreshing service 'SUSE_Linux_Enterprise_Server_12_SP2_x86_64'.

Problem retrieving the repository index file for service 'SUSE_Linux_Enterprise_Server_12_SP2_x86_64':

Download (curl) error for 'https://scc.suse.com/access/services/1346/repo/repoindex.xml?cookies=0&credentials=SUSE_Linux_Enterprise_Server_12_SP2_x86_64':

Error code: Curl error 59

Error message: failed setting cipher list: DEFAULT_SUSE

Resolution

This is a bug and below workaround could be used to address it:

 

a.      Remove /etc/ld.so.conf.d/ntls.conf or comment out the line in the file.

 

b.      Run #ldconfig –v

 

c.      Now the commands would run without any issue

 

d.      At this point, if you run amdiagcfg.sh or ambkup.sh or amrestore.sh scripts which are in /opt/novell/devman/bin, you’ll see the error :

./ambkup.sh: line 152:  7966 Aborted                 ${JAVA} -Djava.library.path=/opt/novell/lib64 -jar certtool.jar -edirTree ${EDIR_TREE} -edirIP ${IP_ADDR} -edirServer ${EDIR_SERVER_DN_DOT} -edirUser ${DS_ADMIN_DN_DOT} -edirPwd ${DS_ADMIN_PWD} -bkup -file "${BKUP_DIR}/${BKUP_FILE}.zip" -pwd "${CERT_ENC_PWD}" -trcontainer trustedRoots.accessManagerContainer.novell -caName "${EDIR_CA}" >> ${LOG_FILE} 2>&1

 

e.      To resolve this, please follow the steps in TID 7022106