Unable to pull images from vSphere with Tanzu's Subscribed Content Library with the error "A general system error occurred: HTTP request error: cannot authenticate SSL certificate for host wp-content.vmware.com."
search cancel

Unable to pull images from vSphere with Tanzu's Subscribed Content Library with the error "A general system error occurred: HTTP request error: cannot authenticate SSL certificate for host wp-content.vmware.com."

book

Article ID: 323442

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

Symptoms:
Customers start to see the following task fail in vSphere. 

image.png

In the vmop pod logs you also will see

2024-03-08T00:53:52.148847094Z stderr F E0308 00:53:52.148820 1 contentsource_controller.go:343] controllers/ContentSource "msg"="failed to difference images" "error"="Error exporting file ubuntu-ova.ovf. Reason: HTTP request error: cannot authenticate SSL certificate for host wp-content.vmware.com."



Environment

VMware vCenter Server 7.0.x

Cause

This is due to a Cert Change VMware pushed to wp-content.vmware.com 

Due to the fact that this is using a subscribed content library, it will no longer trust any subscribed library after a cert change.

Resolution

Access the Content Libraries page from the Menu.

image.png

Find the subscribed content library for wp-content.vmware.com, right click the library, and click edit.

image.png

Then, without making any changes, click OK. After this a red banner log below will appear, click Actions to trust the new cert. It will prompt you to trust the new certificate. Hit Ok to finalize the change.


image.png

After this wait 10-15 minutes for VMOP to automatically pull the now trusted images back to the supervisor cluster.