Cannot install Cloudlinux OS | Curl error (58): Problem with the local SSL certificate | Problem: package rhn-setup-1:2.12.4-1

Issue

Clients are facing an error during CloudLinux installation.

Errors during downloading metadata for repository 'cloudlinux-ea4-rollout-1': 
  - Curl error (58): Problem with the local SSL certificate for https://rollout.cloudlinux.com/slot-1/EA4/8/x86_64/repodata/repomd.xml [could not load PEM client certificate, OpenSSL error error:02001002:system library:fopen:No such file or directory, (no key found, wrong pass phrase, or wrong file format?)] 
Error: Failed to download metadata for repo 'cloudlinux-ea4-rollout-1': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried 
CloudLinux-EA4-8 - Gradual Rollout Slot 2       0.0  B/s |   0  B     00:00 
Errors during downloading metadata for repository 'cloudlinux-ea4-rollout-2': 
  - Curl error (58): Problem with the local SSL certificate for https://rollout.cloudlinux.com/slot-2/EA4/8/x86_64/repodata/repomd.xml [could not load PEM client certificate, OpenSSL error error:02001002:system library:fopen:No such file or directory, (no key found, wrong pass phrase, or wrong file format?)] 
Error: Failed to download metadata for repo 'cloudlinux-ea4-rollout-2': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried 
CloudLinux-EA4-8 - Gradual Rollout Slot 3       0.0  B/s |   0  B     00:00

Error:
 Problem: package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ requires rhn-client-tools = 1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux, but none of the providers can be installed
  - package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ conflicts with cloudlinux-ea4-release < 1-9 provided by cloudlinux-ea4-release-1-8.el8.noarch from @System
  - cannot install the best candidate for the job
  - problem with installed package cloudlinux-ea4-release-1-8.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Last metadata expiration check: 0:00:05 ago on Tue 25 Mar 2025 02:26:19 PM EDT.
Error:
 Problem: package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ requires rhn-client-tools = 1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux, but none of the providers can be installed
  - package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ conflicts with cloudlinux-ea4-release < 1-9 provided by cloudlinux-ea4-release-1-8.el8.noarch from @System
  - cannot install the best candidate for the job
  - problem with installed package cloudlinux-ea4-release-1-8.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Last metadata expiration check: 0:00:06 ago on Tue 25 Mar 2025 02:26:19 PM EDT.
Error:
 Problem: package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ requires rhn-client-tools = 1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux, but none of the providers can be installed
  - package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ conflicts with cloudlinux-ea4-release < 1-9 provided by cloudlinux-ea4-release-1-8.el8.noarch from @System
  - cannot install the best candidate for the job
  - problem with installed package cloudlinux-ea4-release-1-8.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Last metadata expiration check: 0:00:07 ago on Tue 25 Mar 2025 02:26:19 PM EDT.
Error:
 Problem: package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ requires rhn-client-tools = 1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux, but none of the providers can be installed
  - package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ conflicts with cloudlinux-ea4-release < 1-9 provided by cloudlinux-ea4-release-1-8.el8.noarch from @System
  - cannot install the best candidate for the job
  - problem with installed package cloudlinux-ea4-release-1-8.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Last metadata expiration check: 0:00:08 ago on Tue 25 Mar 2025 02:26:19 PM EDT.
Error:
 Problem: package rhn-setup-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ requires rhn-client-tools = 1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux, but none of the providers can be installed
  - package rhn-client-tools-1:2.12.4-1.module_el8.10.0+6904+f35044bf.cloudlinux.x86_64 from repo.cloudlinux.com_cloudlinux_8_BaseOS_x86_64_os_ conflicts with cloudlinux-ea4-release < 1-9 provided by cloudlinux-ea4-release-1-8.el8.noarch from @System
  - cannot install the best candidate for the job
  - problem with installed package cloudlinux-ea4-release-1-8.el8.noarch
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Unable to install dnf-plugin-spacewalk, please contact CloudLinux support at https://cloudlinux.zendesk.com/hc/requests/new

Environment

• CloudLinux
• cldeploy

Solution

The issue is currently under investigation by our developers with task CLOS-3288.

Workaround

Install the related packages manually and retry the deploy script.

yum install rhn-setup 

yum update alt-curlssl11 --enablerepo=cl*

yum update

Key-based activation:

sh cldeploy -k ACTIVATION_KEY --skip-os-check

IP-based activation:

sh cldeploy -i --skip-os-check

Cause

Issue under investigation.