Bug 1377076

Summary: The status and color of subscription-manager-gui does not change when ca certs are removed.
Product: Red Hat Enterprise Linux 7 Reporter: qianzhan
Component: subscription-managerAssignee: Kevin Howell <khowell>
Status: CLOSED WORKSFORME QA Contact: John Sefler <jsefler>
Severity: low Docs Contact:
Priority: medium    
Version: 7.3CC: csnyder, jmolet, khowell, qianzhan, redakkan, shihliu, skallesh, vrjain
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-09-30 02:39:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
status_and_color_should_be_grey_when_ca_certs_removed.png
none
rhsm.log
none
'status_and_color_are_normal.png' none

Description qianzhan 2016-09-18 08:27:36 UTC 
Description of problem:
The status and color of subscription-manager-gui does not change when ca certs are removed.

Version-Release number of selected component (if applicable):
subscription-manager: 1.17.15-1.el7
python-rhsm: 1.17.9-1.el7


How reproducible:
always

Steps to Reproduce:
1. Register RHEL-7.3-20160914.1 against SAM1.4, and auto attach it.

2. Remove all of CA certs from /etc/rhsm/ca/

3. Open subscription-manage-gui.
The status is still subscribed, and the status color is green.

Actual results:
As step 3.

Expected results:
When all of CA certs are removed, the gui status should be 'unknown' with grey color.

Additional info:
Please see attachment 'status_and_color_should_be_grey_when_ca_certs_removed.png'
and 'rhsm.log'
Comment 1 qianzhan 2016-09-18 08:28:03 UTC 
Created attachment 1202126 [details]
status_and_color_should_be_grey_when_ca_certs_removed.png
Comment 2 qianzhan 2016-09-18 08:28:29 UTC 
Created attachment 1202127 [details]
rhsm.log
Comment 5 J.C. Molet 2016-09-22 15:27:53 UTC 
QA verification: This appears to happen as described. (as of subscription-manager-1.17.15-1)   Will create a test for it.
Comment 6 Chris Snyder 2016-09-26 14:45:58 UTC 
@devs:

After the CA certs are deleted:

1) Can we verify that the downloaded entitlement and identity certs are valid and authentic?

2) When is the status cache invalidated?
Comment 7 Kevin Howell 2016-09-29 20:07:34 UTC 
I was unable to reproduce as described.

I did the following:
1. Register and attach subscriptions.
2. Remove the CA certs from /etc/rhsm/ca/
3. Launch subscription-manager-gui.

Doing this, I got the expected results (gray question mark icon/unknown status). I suspect perhaps you still had subscription-manager-gui running in the background while the certs were deleted (which we won't detect). Can you please confirm? If there is a bug, I'm not able to reproduce, and will probably need more info (what's different between my attempt to reproduce and yours)?
Comment 8 qianzhan 2016-09-30 02:39:13 UTC 
Hi Kevin,

There is no difference between your steps and mine. I'm sure no gui window in the background when the certs were removed.

I can not reproduce it either with RHEL-7.3-RC-1.0 (Please see attachment 'status_and_color_are_normal.png'). So close this bug now, and will reopen it when it happens again.
Comment 9 qianzhan 2016-09-30 02:40:07 UTC 
Created attachment 1206099 [details]
'status_and_color_are_normal.png'