Bug 131472

Summary:	ssl section / rhn-ssl-tool logic mismatch
Product:	Red Hat Satellite 5	Reporter:	Todd Warner <taw>
Component:	Installer	Assignee:	Robin Norwood <robin.norwood>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Max Spevack <mspevack>
Severity:	high	Docs Contact:
Priority:	high
Version:	360	CC:	rhn-bugs
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-03-22 17:48:57 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	127673

Description Todd Warner 2004-09-01 17:12:52 UTC

The behavior of rhn-ssl-tool's hostname/directory-generation logic:
command: rhn-ssl-tool --set-hostname chimchim.devel.redhat.com
directory generated: ~/ssl-build/chimchim.devel/

command: rhn-ssl-tool --set-hostname chimchim.redhat.com
directory generated: ~/ssl-build/chimchim/

command: rhn-ssl-tool --set-hostname chimchim.not_FQDN
directory generated: ~/ssl-build/chimchim.not_FQDN/

Case #3 shows where the tool can't "intelligently" determine the
machine name so it punts.

Comment 1 Todd Warner 2004-09-01 17:14:38 UTC

Oh... forgot to add... the website does this:

command: rhn-ssl-tool --set-hostname chimchim.devel.redhat.com
directory generated: ~/ssl-build/chimchim.devel/

command: rhn-ssl-tool --set-hostname chimchim.redhat.com
directory generated: ~/ssl-build/chimchim.redhat/

command: rhn-ssl-tool --set-hostname chimchim.not_FQDN
directory generated: ~/ssl-build/chimchim.not_FQDN/

I.e., it just picks the first two period deliminated thingies... bad!

Comment 2 Todd Warner 2004-09-01 17:16:14 UTC

De-privatized the bug... no reason to hide it.

Comment 3 Robin Norwood 2004-09-27 14:17:55 UTC

Fixed in CVS.

Test plan: Run a satellite install with a valid 3-part hostname
'foo.bar.com' - The SSL server key generated should be for 'foo', not
'foo.bar'.

Comment 4 Todd Warner 2004-10-21 16:38:10 UTC

QA push. {ON_DEV,QA_READY} --> ON_QA

Comment 5 Max Spevack 2004-11-29 14:54:07 UTC

Verified -- on test07.rhndev.redhat.com, the ssl-build directly
correctly created the certs, and placed them in ssl-build/test07.rhndev

Comment 6 Todd Warner 2005-03-22 17:48:57 UTC

Mass move from PROD_READY to CLOSED:CURRENTRELEASE