Bug 1080500

Summary: Satellite 6 allows import / upload of expired manifest without checking (should show error message and prevent upload)
Product: Red Hat Satellite Reporter: Pavel Studeník <pstudeni>
Component: Subscription ManagementAssignee: Tom McKay <tomckay>
Status: CLOSED DEFERRED QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.0.4CC: bbuckingham, bkearney, cwelton, jhutar, pmutha, xdmoon
Target Milestone: UnspecifiedKeywords: Triaged, UserExperience
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1297047 (view as bug list) Environment:
Last Closed: 2017-03-22 20:55:10 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1297047    
Bug Blocks: 1115190    
Attachments:
Description Flags
expired manifest
none
Manifest with expired entitlement none

Description Pavel Studeník 2014-03-25 14:36:57 UTC
Created attachment 878490 [details]
expired manifest

Description of problem:
I upload expired manifest to an organization. And then I try to enable some Red Hat repository. I got internal error 'SecurityViolation'. I investigate what is wrong, but I didn't find information about expiration. Only error in log.


Version-Release number of selected component (if applicable):
katello-1.5.0-18.el6sat.noarch


How reproducible:
Always

Steps to Reproduce:
1. Create expired manifest
2. Upload manifesto to Katello
3. Enable some Red Hat repository

Actual results:
I got error "product Red Hat Enterprise Linux Desktop repositories import: SecurityViolation occurred when contacting CDN to fetch listing files" in log

Expected results:
Show some message about expired manifest

Additional info:

==> /var/log/foreman/production.log <==
  Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-1.5.0/app/views/katello/providers/redhat/_repo_sets.haml (8829.2ms)
  Rendered /opt/rh/ruby193/root/usr/share/gems/gems/katello-1.5.0/app/views/katello/providers/redhat/_tab.html.haml (12001.0ms)
Completed 200 OK in 13287ms (Views: 11756.6ms | ActiveRecord: 259.4ms)
Processing by Katello::ProductsController#refresh_content as */*
  Parameters: {"content_id"=>"829", "id"=>"47"}
 
product Red Hat Enterprise Linux Desktop repositories import: SecurityViolation occurred when contacting CDN to fetch listing files
/opt/rh/ruby193/root/usr/share/gems/gems/katello-1.5.0/app/lib/katello/resources/cdn.rb:105:in `rescue in get'
/opt/rh/ruby193/root/usr/share/gems/gems/katello-1.5.0/app/lib/katello/resources/cdn.rb:79:in `get'

Comment 1 RHEL Program Management 2014-03-25 14:42:56 UTC
Since this issue was entered in Red Hat Bugzilla, the release flag has been
set to ? to ensure that it is properly evaluated for this release.

Comment 6 William Poteat 2016-01-22 15:50:49 UTC
Created attachment 1117271 [details]
Manifest with expired entitlement

This has a single entitlement which expires on Dec 14 2014. It will show the behavior.

Comment 9 Bryan Kearney 2016-08-04 20:16:19 UTC
Moving 6.2 bugs out to sat-backlog.

Comment 10 Bryan Kearney 2017-03-22 20:55:10 UTC
I do not believe this will be addressed in the next few releases, so I am closing this out. If you feel this was incorrect, please feel free to re-open with additional information.