Bug 1563113
| Summary: | [PATCH] 'rhui-manager cert upload' command does not update client cert and key of each RPM repos | ||
|---|---|---|---|
| Product: | Red Hat Update Infrastructure for Cloud Providers | Reporter: | Satoru SATOH <ssato> |
| Component: | RHUA | Assignee: | RHUI Bug List <rhui-bugs> |
| Status: | CLOSED ERRATA | QA Contact: | Vratislav Hutsky <vhutsky> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 3.0.0 | CC: | kfujii, mkubik |
| Target Milestone: | 3.0.3 | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-05-16 12:48:53 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
*** Bug 1563045 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1569 |
Description of problem: Current implementation of 'rhui-manager cert upload' and corresponding interactive command of rhui-manager (home -> [n] -> [u] ...) look broken due to incompatibilities in rebased version of pulp RHUI v3 using and cannot update all of necessary certs correctly. It's my understanding that these commands only update the cert in /etc/pki/rhui/redhat/ and does not update client cert and key of each Red Hat RPM repos saved in /var/lib/rhui/remote_share/<repo_id>_yum_importer/pki/. As a result, each repos' importer will fail to sync contents from the Red Hat CDN after updating the (content) cert. Version-Release number of selected component (if applicable): rh-rhui-tools-libs-3.0.1-3.el7ui How reproducible: Always, I think. Steps to Reproduce: 1. Update the RHUI entitlement (content) cert with using 'rhui-manager cert upload' command or its interactive shell command 2. Check the timestamp of /etc/pki/rhui/redhat/*.pem and /var/lib/rhui/remote_share/<repo_id>_yum_importer/pki/client{.cert,key}, and/or try to sync some of repos. Actual results: Client certs of each repo importers are not updated and it fails to sync repos. Expected results: Client certs of each repo importers are updated along with the master cert in /etc/pki/rhui/redhat/, and it succeeds to sync repos. Additional info: I'll attach a couple of experimental patches taking a little bit different approaches should resolve this issue.