Bug 1116908
| Summary: | Pulp qpidd ssl cert expiration defaults to 1 year | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Eric Helms <ehelms> |
| Component: | Content Management | Assignee: | Eric Helms <ehelms> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Katello QA List <katello-qa-list> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.0.4 | CC: | cwelton, jmontleo, kbidarka |
| Target Milestone: | Unspecified | ||
| Target Release: | Unused | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| URL: | http://projects.theforeman.org/issues/5599 | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-09-11 12:19:55 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Eric Helms
2014-07-07 14:52:30 UTC
Created from redmine issue http://projects.theforeman.org/issues/5599 Upstream bug assigned to ehelms Moving to POST since upstream bug http://projects.theforeman.org/issues/5599 has been closed ------------- Eric Helms https://github.com/Katello/puppet-certs/pull/18 Tested with Sat6-GA-snap4
1) [root@xxxx ~]# cat /usr/share/katello-installer/modules/certs/manifests/params.pp | grep -ie ca_expiration -ie expiration
$expiration = '7300' # 20 years
$ca_expiration = '36500' # 100 years
2) As seen below all certs are created for a period of 20 years.
[root@xxx]# for i in xxxx.redhat.com-qpid-broker.crt katello-ca.crt ../qpid_client_striped.crt
> do
> echo -e "\n$i\n" ; openssl x509 -in $i -noout -startdate -enddate
> done
xxxx.redhat.com-qpid-broker.crt
notBefore=Aug 5 22:52:22 2014 GMT
notAfter=Aug 7 22:52:22 2034 GMT
katello-ca.crt
notBefore=Aug 12 22:44:26 2014 GMT
notAfter=Jan 17 22:44:26 2038 GMT
../qpid_client_striped.crt
notBefore=Aug 5 22:53:03 2014 GMT
notAfter=Aug 7 22:53:03 2034 GMT
=============
Installed Packages
candlepin-0.9.19-1.el6_5.noarch
candlepin-scl-1-5.el6_4.noarch
candlepin-scl-quartz-2.1.5-5.el6_4.noarch
candlepin-scl-rhino-1.7R3-1.el6_4.noarch
candlepin-scl-runtime-1-5.el6_4.noarch
candlepin-selinux-0.9.19-1.el6_5.noarch
candlepin-tomcat6-0.9.19-1.el6_5.noarch
createrepo-0.9.9-21.2.pulp.el6sat.noarch
elasticsearch-0.90.10-4.el6sat.noarch
katello-1.5.0-28.el6sat.noarch
katello-ca-1.0-1.noarch
katello-certs-tools-1.5.6-1.el6sat.noarch
katello-installer-0.0.57-1.el6sat.noarch
m2crypto-0.21.1.pulp-10.el6sat.x86_64
mod_wsgi-3.4-1.pulp.el6sat.x86_64
pulp-katello-0.3-3.el6sat.noarch
pulp-nodes-common-2.4.0-0.30.beta.el6sat.noarch
pulp-nodes-parent-2.4.0-0.30.beta.el6sat.noarch
pulp-puppet-plugins-2.4.0-0.30.beta.el6sat.noarch
pulp-puppet-tools-2.4.0-0.30.beta.el6sat.noarch
pulp-rpm-plugins-2.4.0-0.30.beta.el6sat.noarch
pulp-selinux-2.4.0-0.30.beta.el6sat.noarch
pulp-server-2.4.0-0.30.beta.el6sat.noarch
python-gofer-qpid-1.3.0-1.el6sat.noarch
python-isodate-0.5.0-1.pulp.el6sat.noarch
python-kombu-3.0.15-12.pulp.el6sat.noarch
python-pulp-bindings-2.4.0-0.30.beta.el6sat.noarch
python-pulp-common-2.4.0-0.30.beta.el6sat.noarch
python-pulp-puppet-common-2.4.0-0.30.beta.el6sat.noarch
python-pulp-rpm-common-2.4.0-0.30.beta.el6sat.noarch
python-qpid-0.22-14.el6sat.noarch
python-qpid-qmf-0.22-33.el6.x86_64
qpid-cpp-client-0.22-42.el6.x86_64
qpid-cpp-server-0.22-42.el6.x86_64
qpid-cpp-server-linearstore-0.22-42.el6.x86_64
qpid-java-client-0.22-6.el6.noarch
qpid-java-common-0.22-6.el6.noarch
qpid-proton-c-0.7-1.el6.x86_64
qpid-qmf-0.22-33.el6.x86_64
qpid-tools-0.22-12.el6.noarch
ruby193-rubygem-katello-1.5.0-78.el6sat.noarch
rubygem-hammer_cli_katello-0.0.4-10.el6sat.noarch
This was delivered with Satellite 6.0 which was released on 10 September 2014. |