Client major version upgrade using autoyast profile fails with curl error 60

This document (000021488) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Manager Server 4.3

Situation

Trying to perform client upgrade using autoyast profile from SLES 12 SP5 to SLES 15 SP3 results in curl error 60 while trying to refresh the SLES 12 SP5 repositories.

Error Code: Curl error 60
Error message: SSL certificate problem: unable to get local issuer certificate

This is not expected as the current repos (on source operating system) must not be refreshed during the upgrade.

Resolution

Following workaround (removing susemanager repo files) can be used on affected client to mitigate the issue :

rm -rf /etc/zypp/repos.d/suseman*

It can also be removed with salt state:

remove_suma_repos_file:
  cmd.run:
    - name: rm -rf /etc/zypp/repos.d/suseman*

Status

Reported to Engineering

Additional Information

This issue will not be seen since migration to SLES 15 SP4 and higher. However, the issue was reported to engineering to find the cause. In order to get removed repositories back on affected client, a highstate against the client can be trigger from SUSE Manager Server.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.