Certificate Support on SUSE Linux Enterprise 11

Cloud agent installed on SUSE Linux Enterprise 11 may throw the following error for the certificate ca-bundle.crt when communicating with the Qualys Cloud Platform. This happens when the certificate files are not present on the host asset.

[qualys-cloud-agent][8056]:[Error]:Http request failed:Problem with the SSL CA cert (path? access rights?): error setting certificate verify locations:

CAfile: /etc/ssl/ca-bundle.crt

CApath: none

To fix this issue, you must manually install the certificate files at the appropriate location on the host asset. You can either use the certificate files from your existing RHEL or CentOS assets or download the certificate files from the following location:

https://curl.haxx.se/docs/caextract.html

The following are the steps to manually install the certificate:

1. Download the file cacert.pem and rename it to ca-bundle.pem.
2. Copy the certificate file (ca-bundle.pem) at the following default location on SUSE Linux Enterprise 11: /etc/ssl/
3. If you want to use any other location, ensure that the directory path is added in the /etc/Qualys/cloud-agent/agent.config file in the following manner:
   
   {
"os": "Suse",
 "cafile": "<CustomizedPath>"
}
4. Restart the Cloud Agent to apply the updated certificate file.