Bug 1600868

Summary: spacewalk-public.cert expired
Product: [Community] Spacewalk Reporter: Matthew Hope <mhope>
Component: ServerAssignee: Michael Mráka <mmraka>
Status: CLOSED EOL QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 2.6CC: mianosm, redhat, tom, vvhire
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-10-21 13:24:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Matthew Hope 2018-07-13 08:40:35 UTC
Description of problem:

spacewalk-public.cert has expired today, I have an error:
 "Your satellite certificate has expired. Please visit the following link for steps on how to request or generate a new certificate: https://access.redhat.com/knowledge/tools/satcert Your satellite enters restricted period in 7 day(s)."

Version-Release number of selected component (if applicable): 2.3


How reproducible:

Install spacewalk 2.3, certificate has expired


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Tomáš Kašpárek 2018-07-13 13:01:45 UTC
Hello Matthew,

could you try https://github.com/spacewalkproject/spacewalk/wiki/CertCreation as workaround till we provide updated certificate?

Comment 2 Matthew Hope 2018-07-13 13:32:08 UTC
Hi Tomáš,

I have followed that guide and created my own GPG key and signed a modified spacewalk-public.cert (dated until 2020), I'll import your official cert once its updated.

One thing that is worth mentioning, the signing script (gen-oss-sat-cert.pl) cannot be found if you follow the link in that documentation, https://github.com/spacewalkproject/spacewalk/blob/master/scripts/gen-oss-sat-cert.pl ends up in a 404.

Instead I downloaded the script from the 2.3 branch:
https://github.com/spacewalkproject/spacewalk/blob/SPACEWALK-2.3/scripts/gen-oss-sat-cert.pl

Matt

Comment 3 Tomáš Kašpárek 2018-07-13 13:41:20 UTC
Thank you for noticing that gen-oss-sat-cert.pl can not be found, it's because there are no more entitlements in later versions of Spacewalk (so one way to get rid of entitlement issues would be just to upgrade).

Anyways I've updated the wiki to use https://github.com/spacewalkproject/spacewalk/blob/SPACEWALK-2.3/scripts/gen-oss-sat-cert.pl

Comment 4 Matthew Hope 2018-07-13 13:45:22 UTC
Hi Tomáš,

Great stuff thanks, we will be looking to upgrade before the end of the year.

Matt

Comment 5 Tom Wilson 2018-07-13 16:27:56 UTC
Hi Tomáš,

Do you know when the new official certificate will be available?

Comment 6 sathvir.singh 2018-07-16 11:51:36 UTC
Hi All,

Has there been any update on this (availability of the new official certificate)?

Thanks

Comment 7 Tomáš Kašpárek 2018-07-16 11:57:20 UTC
Hello,

the best solution for you would be to upgrade to Spacewalk 2.5 (or higher) as these versions are not using entitlement certificate anymore.

If for some reason you want to stay at Spacewalk 2.4 (or lower), I've created new entitlement certificate. However I did use different GPG key for signing it so you will need to import it.
Instructions how to import my GPG key, and re-activate Spacewalk can be found here: https://github.com/spacewalkproject/spacewalk/wiki/Refreshing-certificate

Best regards,
Tomáš

Comment 8 sathvir.singh 2018-07-16 12:06:37 UTC
Many thanks Tomáš,

Worked a treat!

Comment 9 redhat 2018-07-20 20:05:20 UTC
I'd like to point out that if any of the modules used by https://raw.githubusercontent.com/spacewalkproject/spacewalk/SPACEWALK-2.3/scripts/gen-oss-sat-cert.pl aren't installed, [ie Date::Parse in my case] the script won't work. And of course Spacewalk won't let me install it because of the cert issue at hand. 

I can work around it [temporarily install from public repo] but wanted ya'll to be aware.

Comment 10 redhat 2018-07-20 20:37:24 UTC
There appears to be a simpler workaround available here:
https://github.com/spacewalkproject/spacewalk/wiki/Refreshing-certificate

Comment 11 Vijay 2018-07-30 11:04:46 UTC
Hi Tomas,
Below link is not working for me as I have spacewalk 2.1.

https://github.com/spacewalkproject/spacewalk/wiki/Refreshing-certificate.

Can you please suggest or I have to upgrade to 2.5?

Regards,
Vijay

Comment 12 Michael Mráka 2019-10-21 13:24:29 UTC
Spacewalk 2.8 (and older) has already reached it's End Of Life.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before end of life. If you would still like
to see this bug fixed and are able to reproduce it against current version
of Spacewalk 2.9, you are encouraged change the 'version' and re-open it.