Bug 1329708

Summary: 'yum whatprovides sshfs' results in SEC_ERROR_BAD_KEY with on-demand repo
Product: Red Hat Satellite Reporter: Tom McKay <tomckay>
Component: Hosts - ContentAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED WONTFIX QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.2.0CC: bbuckingham, bkearney, dlobatog, inecas, mhrivnak
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-09-13 17:22:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tom McKay 2016-04-22 16:19:10 UTC 
I enabled "Red Hat Enterprise Linux 7 Server RPMs x86_64 7Server" on-demand download policy and synced. I registered a host (sat-6.2 server itself) and assigned RHEL sub. Successfully "yum install -y emacs" and then tried "yum whatprovides sshfs"

$ yum whatprovides sshfs
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Repo rhel-7-server-rpms forced skip_if_unavailable=True due to: /etc/pki/entitlement/4207160575726252180-key.pem
rhel-7-server-rpms                                                                            10649/10649
https://sat62.example.com/pulp/repos/megacorp/Library/content/dist/rhel/server/7/7Server/x86_64/os/repodata/77f96a61f6f2b7fe58b83bf06c964e8b952225a6-filelists.xml.gz: [Errno 14] curl#58 - "unable to load client key: -8178 (SEC_ERROR_BAD_KEY)"
Trying other mirror.



Installed Packages

candlepin-0.9.54.4-1.el7.noarch
candlepin-common-1.0.22-1.el7.noarch
candlepin-guice-3.0-2_redhat_1.el7.noarch
candlepin-selinux-0.9.54.4-1.el7.noarch
foreman-installer-katello-3.0.0.19-1.el7sat.noarch
katello-3.0.0-3.el7sat.noarch
katello-ca-consumer-sat-perf-02.sat6.lab.eng.bos.redhat.com-1.0-4.noarch
katello-ca-consumer-sat62.example.com-1.0-1.noarch
katello-certs-tools-2.4.0-1.el7sat.noarch
katello-client-bootstrap-1.0.0-1.el7sat.noarch
katello-common-3.0.0-3.el7sat.noarch
katello-debug-3.0.0-3.el7sat.noarch
katello-default-ca-1.0-1.noarch
katello-installer-base-3.0.0.19-1.el7sat.noarch
katello-selinux-3.0.1.2-1.el7sat.noarch
katello-server-ca-1.0-1.noarch
katello-service-3.0.0-3.el7sat.noarch
libqpid-dispatch-0.4-11.el7.x86_64
pulp-client-1.0-1.noarch
pulp-docker-plugins-2.0.0.2-1.el7sat.noarch
pulp-katello-1.0-3.el7sat.noarch
pulp-puppet-plugins-2.8.1-2.el7sat.noarch
pulp-puppet-tools-2.8.1-2.el7sat.noarch
pulp-rpm-plugins-2.8.1.3-1.el7sat.noarch
pulp-selinux-2.8.1.3-1.el7sat.noarch
pulp-server-2.8.1.3-1.el7sat.noarch
python-gofer-qpid-2.7.6-1.el7sat.noarch
python-pulp-common-2.8.1.3-1.el7sat.noarch
python-pulp-docker-common-2.0.0.2-1.el7sat.noarch
python-pulp-oid_validation-2.8.1.3-1.el7sat.noarch
python-pulp-puppet-common-2.8.1-2.el7sat.noarch
python-pulp-repoauth-2.8.1.3-1.el7sat.noarch
python-pulp-rpm-common-2.8.1.3-1.el7sat.noarch
python-pulp-streamer-2.8.1.3-1.el7sat.noarch
python-qpid-0.30-9.el7sat.noarch
python-qpid-qmf-0.30-5.el7.x86_64
qpid-cpp-client-0.30-11.el7sat.x86_64
qpid-cpp-client-devel-0.30-11.el7sat.x86_64
qpid-cpp-server-0.30-11.el7sat.x86_64
qpid-cpp-server-linearstore-0.30-11.el7sat.x86_64
qpid-dispatch-router-0.4-11.el7.x86_64
qpid-java-client-0.30-3.el7.noarch
qpid-java-common-0.30-3.el7.noarch
qpid-proton-c-0.9-13.el7.x86_64
qpid-qmf-0.30-5.el7.x86_64
qpid-tools-0.30-4.el7.noarch
rubygem-smart_proxy_pulp-1.2.0-1.el7sat.noarch
sat62.example.com-qpid-broker-1.0-1.noarch
sat62.example.com-qpid-client-cert-1.0-1.noarch
sat62.example.com-qpid-router-client-1.0-1.noarch
sat62.example.com-qpid-router-server-1.0-1.noarch
tfm-rubygem-hammer_cli_katello-0.0.22.6-1.el7sat.noarch
tfm-rubygem-katello-3.0.0.21-1.el7sat.noarch
tfm-rubygem-qpid_messaging-0.30.0-7.el7sat.x86_64
Comment 1 Tom McKay 2016-04-22 16:38:15 UTC 
Note: Second time run it ran successfully.

$ sudo yum whatprovides vim
Loaded plugins: product-id, search-disabled-repos, subscription-manager
2:vim-enhanced-7.4.160-1.el7.x86_64 : A version of the VIM editor which includes recent enhancements
Repo        : rhel-7-server-rpms
Matched from:
Provides    : vim = 7.4.160-1.el7



2:vim-enhanced-7.4.160-1.el7.x86_64 : A version of the VIM editor which includes recent enhancements
Repo        : @anaconda/7.2
Matched from:
Provides    : vim = 7.4.160-1.el7



$ sudo yum whatprovides sshfs
Loaded plugins: product-id, search-disabled-repos, subscription-manager
rhel-7-server-rpms/7Server/x86_64/filelists                                        |  13 MB  00:00:00     
No matches found
Comment 3 Brad Buckingham 2016-06-01 17:50:40 UTC 
Michael, can you have someone investigate this and clone to redmine?  Thanks!
Comment 4 Michael Hrivnak 2016-06-08 20:02:13 UTC 
Maybe related, if tangentially: https://access.redhat.com/solutions/1584403

The error appears to be yum failing to read a key of an entitlement cert. That cert gets put into place by subscription-manager. So at least based on the information here, this doesn't look like a pulp bug.
Comment 5 Michael Hrivnak 2017-01-03 16:49:43 UTC 
I'm changing the component since I don't think this is a Pulp bug.