Registration aborts with ERROR: SSL peer certificate or SSH md5 fingerprint was not OK

Subscription Management Tool for SUSE Linux Enterprise 11
Subscription Management Tool for SUSE Linux Enterprise 10
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 10

The registration of a system against a SMT server fails with one of the following error message (as per suse_register.log):


On the client that is running the clientSetup4SMT.sh script only the error "Download failed. Abort." is displayed.

The certificate which was imported using the clientsetup4SMT.sh script does not match the DNS name of the SMT server the client is about to register to. Please follow TID 7006024 - How to recreate SMT 11 CA and server certificate to create a CA and server certificate for the SMT server.

If this issue is experienced, please check the previous output of clientSetup4SMT.sh and check for which server this certificate was issued:

test4:/tmp # ./clientSetup4SMT.sh --host smt.test.site
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            xx:xx:xx:xx:xx:xx:xx:xx
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=DE, CN=YaST Default CA (test4)/emailAddress=postmaster@test4
        Validity
            Not Before: Aug  5 16:24:25 2011 GMT
            Not After : Aug  2 16:24:25 2021 GMT
        Subject: C=DE, CN=YaST Default CA (test4)/emailAddress=postmaster@test4
[...]
            X509v3 Authority Key Identifier:
                keyid:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx
                DirName:/C=DE/CN=YaST Default CA (test4)/emailAddress=postmaster@test4
                serial:xx:xx:xx:xx:xx:xx:xx:xx
[...]

In this case the client was told to register with smt.test.site but the certificate was issued for test4.test.site.

This issue is experienced in particular if the SMT server was cloned from a template on which the CA and server certificate was already configured.