IBM Support

Kubernetes/OpenShift CASE Installation (air gap configuration) Digital Signature Validation Failure Troubleshooting

Troubleshooting


Problem

If the cloudctl case commands fail after November 4th, 2021, and if the failure is related to signature validation, check the /tmp/case/case.log file for the reason of failure.  The following message is an example error message that provides the reason:
  • Unable to validate the signature against any provided public key.   
** Container Application Software for Enterprises (CASE)

Symptom

After November 4th, 2021,  cloudctl case commands might fail with the following error: 
  • error: Unable to validate a signature object for the CASE <CASE name>-<CASE version>.
This failure could occur because the public certificate information used to validate the CASE's digital signature has expired. 
The /tmp/case/case.log file shows the following message:
  • Unable to validate the signature against any provided public key

Resolving The Problem

The message in the /tmp/case/case.log file indicates that the public certificate information in the CASE is expired. After November 1st, 2021, the resolution step to refresh the offline cache will refresh the public certificate data with renewed certificates.   
If you see the failure when you run the cloudctl case launch command, you can resolve the problem in any one of the following two ways:
  • Run the cloudctl case launch command with the --tolerance 1 flag set to ignore the signature validation error.
Note: If you downloaded the CASE by using the cloudctl case save command, then the digital signature was validated as part of this save command
Or:
  • Refresh the offline cache data, which is the output of the cloudctl case save command, with the CASEs that renewed the public certificate information.   
The following command can be used to refresh a specific CASE version with updated certificate data:
  • % cloudctl case save -c "https://github.com/IBM/cloud-pak/raw/master/repo/case/<CASE name to save>/<version of CASE in offline cache>/<CASE name to save>-<version of CASE in offline cache>.tgz" -o <new offline cache> --no-dependency

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS8QTD","label":"IBM Cloud Pak for Integration"},"ARM Category":[{"code":"a8m0z000000cy39AAA","label":"Others"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCSJL","label":"IBM Cloud Pak for Applications"},"ARM Category":[{"code":"a8m0z0000001gRWAAY","label":"Cloud Pak for Apps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS2JQC","label":"IBM Cloud Pak for Automation"},"ARM Category":[{"code":"a8m0z0000001gWWAAY","label":"CloudPak4Automation Platform"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBYVB","label":"IBM Cloud Pak for Business Automation"},"ARM Category":[{"code":"a8m0z0000001gWWAAY","label":"CloudPak4Automation Platform"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSHGYS","label":"IBM Cloud Pak for Data"},"ARM Category":[{"code":"a8m0z000000Goy2AAC","label":"Overview"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFC4F","label":"IBM Cloud Pak for Multicloud Management"},"ARM Category":[{"code":"a8m0z0000001ipaAAA","label":"CloudPak4MCM"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSDSDC","label":"IBM Cloud Pak for Network Automation"},"ARM Category":[{"code":"a8m0z000000brTjAAI","label":"ICP"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSTDPP","label":"IBM Cloud Pak for Security"},"ARM Category":[{"code":"a8m0z0000001js1AAA","label":"Openshift"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSJGDOB","label":"IBM Watson AIOps"},"ARM Category":[{"code":"a8m0z0000001jFJAAY","label":"Watson AIOps"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
05 April 2022

UID

ibm16509238