# Red Hat Yum proxy support in Nexus? **URL:** \ **Category:** Sonatype Nexus Repository\ **Created:** [September 12, 2019, 4:06am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476 "2019-09-12T04:06:25Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![hazri.ahmad](https://avatars.discourse-cdn.com/v4/letter/h/22d042/32.png) [@hazri.ahmad](https://community.sonatype.com/u/hazri.ahmad)\ **Post date:** [September 12, 2019, 4:06am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/1 "2019-09-12T04:06:25Z")
![Annotation%202019-09-12%20134254](https://canada1.discourse-cdn.com/flex047/uploads/communitysonatype/original/1X/5a9c00e051887ceff74780649fd5609b58243cbc.png) Hi. I have created CentOS yum repos proxy and it working fine. But when I created for Red Hat yum proxy, it doesn’t work. We have valid Red Hat subscription actually. Is it because Red Hat not allow 3rd party to connect their server or Nexus doesnt support this? Thank you From client error message: > [root@uat ~]# yum install nc > Loaded plugins: product-id, search-disabled-repos, subscription-manager > This system is not registered with an entitlement server. You can use subscription-manager to register. > [http://192.168.65.111:8081/repository/yum-rhel7-proxy/repodata/repomd.xml:](http://192.168.65.111:8081/repository/yum-rhel7-proxy/repodata/repomd.xml:) [Errno 14] HTTP Error 404 - Not Found > Trying other mirror. > To address this issue please refer to the below knowledge base article > > [[Errno 14] yum fails with HTTP/HTTPS Error 404 - Red Hat Customer Portal](https://access.redhat.com/articles/1320623) ---
**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\ **Post date:** [September 16, 2019, 2:48pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/2 "2019-09-16T14:48:27Z")
Does [https://cdn.redhat.com/content/dist/rhel/entitlement-7/releases/$releasever/$basearch/scaleablefilesystem/os/repodata/repomd.xml](https://cdn.redhat.com/content/dist/rhel/entitlement-7/releases/%24releasever/%24basearch/scaleablefilesystem/os/repodata/repomd.xml) exist? Access to repomd is required and it’s complaining it can’t find it. I don’t recall any other reports of Redhat not working. -Joe ---
**Author:** ![hazri.ahmad](https://avatars.discourse-cdn.com/v4/letter/h/22d042/32.png) [@hazri.ahmad](https://community.sonatype.com/u/hazri.ahmad)\ **Post date:** [September 17, 2019, 2:43am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/3 "2019-09-17T02:43:24Z")
Hi Joe Im not so sure myself, coz the baseurl i copied from redhat access page. Also I check again in my /etc/yum.repos.d/redhat.repo, the enabled repo is [https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os/](https://cdn.redhat.com/content/dist/rhel/server/7/%24releasever/%24basearch/os/) and I try curl to that link but returned permission denied. maybe do you have the baseurl that actually working? can you share if possible? Thank you ---
**Author:** ![rseddon](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/rseddon/32/341_2.png) [@rseddon](https://community.sonatype.com/u/rseddon)\ **Post date:** [September 17, 2019, 2:08pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/4 "2019-09-17T14:08:33Z")
> [@hazri.ahmad](#): > > [https://cdn.redhat.com/content/dist/rhel/server/7/](https://cdn.redhat.com/content/dist/rhel/server/7/) You’d need to expand the variables $releasever and $basearch appropriately for this to work. But I think you’re going to run into another problem. Client side SSL certificates aren’t working in Repo 3, and I believe that will be needed to get access to that repository. We’ve bumped up the priority of this issue in our backlog: [https://issues.sonatype.org/browse/NEXUS-12488](https://issues.sonatype.org/browse/NEXUS-12488) ---
**Author:** ![hazri.ahmad](https://avatars.discourse-cdn.com/v4/letter/h/22d042/32.png) [@hazri.ahmad](https://community.sonatype.com/u/hazri.ahmad)\ **Post date:** [September 24, 2019, 12:44pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/6 "2019-09-24T12:44:34Z")
Hi I expand the variable as you suggested [https://cdn.redhat.com/content/dist/rhel/server/7Server/x86\_64/os/](https://cdn.redhat.com/content/dist/rhel/server/7Server/x86_64/os/) So far I did not getting the ‘handshake-failure’ issue, but _ **HTTP/1.1 403 Forbidden** _ instead. > 2019-09-24 19:43:02,072+0800 DEBUG [qtp40223173-152] admin org.sonatype.nexus.httpclient.outbound - [https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86\_64/os/repodata/repomd.xml](https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml) \< **HTTP/1.1 403 Forbidden** @ 180.3 ms ---
**Author:** ![steven.foster](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/steven.foster/32/879_2.png) [@steven.foster](https://community.sonatype.com/u/steven.foster)\ **Post date:** [October 11, 2019, 10:37am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/7 "2019-10-11T10:37:44Z")
I am also trying to create a Red Hat yum proxy and have the same problem, where I get a HTTP 403 returned. I am assuming this is because cdn.redhat requires authentication - in particular I think it expects you to pass it sslclientcert, sslclientkey, sslcacert (see [How to authenticate to https://cdn.redhat.com - Red Hat Customer Portal](https://access.redhat.com/solutions/3533361)). sslclientkey and sslclientcert are found in /etc/pki/entitlement on your Red Hat system and I believe are generated as part of your RHN subscription. Presumably, Nexus does not pass these details forward (I have defined these fields in my local nexus.repo file but see no evidence of them being provided to the cdn endpoint). I’d be interested to know if I’m approaching this the wrong way, or if there is an alternative method that allows you to sync Red Hat repositories with Nexus. I have searched through a lot of articles but haven’t found much to suggest this is possible. ---
**Author:** ![gregory.allen](https://avatars.discourse-cdn.com/v4/letter/g/dc4da7/32.png) [@gregory.allen](https://community.sonatype.com/u/gregory.allen)\ **Post date:** [February 19, 2020, 7:30pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/8 "2020-02-19T19:30:06Z")
Steve, I am trying to build the same exact type of repo in Nexus to [CDN.redhat.com](http://CDN.redhat.com). Apparently we have to take the entitlement certs from red hat, and somehow get a CA cert from red hat, and then use a command like this: openssl pkcs12 -export -in content-rhel7.crt -inkey content-rhel7.key -out rhel.p12 -name clientKeystore -CAfile cdn.redhat.com-chain.crt -caname [cdn.redhat.com](http://cdn.redhat.com) Then we ahve to import that p12 file into the java keystore: keytool -importkeystore -deststorepass changeit -destkeypass changeit -destkeystore keystore.jks -srckeystore rhel.p12 -srcstoretype PKCS12 -srcstorepass password -alias clientKeystore Then you update the nexus.vmoptions file with: -Djavax.net.ssl.keyStore=/path/to/keystore.jks -Djavax.net.ssl.keyStorePassword=changeit Then restart nexus service. Then configure a yum proxy repo for RHEL in the Nexus GUI. Use a URL such as: [https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86\_64/os](https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os) I have not gotten this to work yet. I’m still trying to get my certs from Red Hat. Specifically the CA file, since my red hat boxes have never reached the internet, i’ve only manually registered them into the red hat portal. Red Hat of course points me to Sonatype support. I’m still working with Sonatype to find a solution. I’ll let you know how it goes. ---
**Author:** ![steven.foster](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/steven.foster/32/879_2.png) [@steven.foster](https://community.sonatype.com/u/steven.foster)\ **Post date:** [February 20, 2020, 10:20am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/9 "2020-02-20T10:20:04Z")
Thanks for the info Greg. Be interesting to see how you get on 🙂 ---
**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\ **Post date:** [March 26, 2020, 4:19pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/11 "2020-03-26T16:19:56Z")
Sonatype has an internal ticket for investigation, if you’d like to watch that: [https://issues.sonatype.org/browse/NEXUS-22699](https://issues.sonatype.org/browse/NEXUS-22699) I suspect it’ll result in changes to documentation. Respectfully forgot about this thread, so probably safer to follow there. -Joe ---
**Author:** ![sundelor](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/sundelor/32/1105_2.png) [@sundelor](https://community.sonatype.com/u/sundelor)\ **Post date:** [March 26, 2020, 4:36pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/12 "2020-03-26T16:36:15Z")
oh, great! thx, just in case, i’m ready to help with testing if u need. ---
**Author:** ![sundelor](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/sundelor/32/1105_2.png) [@sundelor](https://community.sonatype.com/u/sundelor)\ **Post date:** [April 8, 2020, 6:47am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/13 "2020-04-08T06:47:35Z")
morning! Since that issue closed without providing any info, can you give us any info? i’ve updated nexus, searched in docs but no new info) ---
**Author:** ![rseddon](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/rseddon/32/341_2.png) [@rseddon](https://community.sonatype.com/u/rseddon)\ **Post date:** [April 8, 2020, 1:39pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/14 "2020-04-08T13:39:19Z")
See here: [https://help.sonatype.com/display/NXRM3/Proxying+RHEL+Yum+Repositories](https://help.sonatype.com/display/NXRM3/Proxying+RHEL+Yum+Repositories) Rich ---
**Author:** ![d.a.maguire](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@d.a.maguire](https://community.sonatype.com/u/d.a.maguire)\ **Post date:** [April 14, 2020, 10:20am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/15 "2020-04-14T10:20:28Z")
Hi, Followed URL steps but still not working with yum-proxy for RHEL. Used Entitlement certificate as recommended by Red Hat. Any advise, would be much appreciated. ---
**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\ **Post date:** [April 14, 2020, 3:04pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/16 "2020-04-14T15:04:53Z")
Can you give more detail to “not working”? Same issues as above? Maybe folks who did the doc will know but I can’t hope to troubleshoot with this level of detail. Thanks, Joe ---
**Author:** ![d.a.maguire](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@d.a.maguire](https://community.sonatype.com/u/d.a.maguire)\ **Post date:** [April 15, 2020, 8:57am UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/17 "2020-04-15T08:57:03Z")
Hi, Error received is the same ; [http://xx.xx.xx.xx:8081/repository/RHEL7server/repodata/repomd.xml:](http://xx.xx.xx.xx:8081/repository/RHEL7server/repodata/repomd.xml:) [Errno 14] H TTP Error 404 - Not Found On RHEL 7 test server. Followed docs steps as close as possible. I wasn’t clear about how to make the RM server access key part. Maybe it’s just something simple?. Regards, David ---
**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\ **Post date:** [April 15, 2020, 1:28pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/18 "2020-04-15T13:28:04Z")
Which step was confusing to you? 6? -Joe ---
**Author:** ![d.a.maguire](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@d.a.maguire](https://community.sonatype.com/u/d.a.maguire)\ **Post date:** [April 15, 2020, 1:57pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/19 "2020-04-15T13:57:59Z")
Hi Joe, Yes step 6, step 5 relates to the client server but 6 seems to refer to the RM server folder? Regards, David. ---
**Author:** ![jtom](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jtom/32/68_2.png) [@jtom](https://community.sonatype.com/u/jtom)\ **Post date:** [April 15, 2020, 2:22pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/20 "2020-04-15T14:22:31Z")
Right, so the keystuff it’s requesting is the stuff you got in Step 4. Step 5&6 could be swapped in order if that makes more sense to you. Or perhaps step 6 could just say “from step 4” to make more clear. Hope that helps, Joe ---
**Author:** ![d.a.maguire](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@d.a.maguire](https://community.sonatype.com/u/d.a.maguire)\ **Post date:** [April 16, 2020, 1:14pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/21 "2020-04-16T13:14:56Z")
Hi Joe, Got one repo working - Server (reset Red Hat cert in nexusrm again) ; others fail with the same error i.e. 14/404 . Will keep trying to see if it works. Regards, David ---
**Author:** ![oshiyanbade](https://avatars.discourse-cdn.com/v4/letter/o/34f0e0/32.png) [@oshiyanbade](https://community.sonatype.com/u/oshiyanbade)\ **Post date:** [April 16, 2020, 3:04pm UTC](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476/22 "2020-04-16T15:04:03Z")
Hi David, We’re glad you’ve been able to get one repo working. To better understand the problem you’re having with the others and how we can help you resolve them, please could you clarify the following. You said in your last message: ‘…others fail with same error i.e 14/404’. Do you mean other RM (Repository Manager) instances i.e do you have multiple Repository Manager instances running on separate boxes/machines or do you have multiple RHEL Yum proxy repository configurations within the same RM instance? Note: in the documentation, step 4 is only for when you have an existing keystore you’re using with RM. If not, you can skip to step 5 after completing step 3. (We’ll update the documentation accordingly to make this clearer) Regards Olu [Next page](https://community.sonatype.com/t/red-hat-yum-proxy-support-in-nexus/2476.md?page=2)