Bug 1961885

Summary:	pulp3: RHEL content on a content proxy returns a 403 to clients
Product:	Red Hat Satellite	Reporter:	Eric Helms <ehelms>
Component:	Installation	Assignee:	Eric Helms <ehelms>
Status:	CLOSED ERRATA	QA Contact:	Devendra Singh <desingh>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	6.4	Keywords:	Triaged
Target Milestone:	6.10.0
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-11-16 14:10:56 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eric Helms 2021-05-18 22:14:08 UTC

Discourse thread: https://community.theforeman.org/t/403-forbidden-error-for-rhel-repos-with-the-clients-registered-to-smart-proxy/23450

<pre>
[root@rhel7-client  entitlement]# curl --cert /etc/pki/entitlement/1373568910360318289.pem --key /etc/pki/entitlement/1373568910360318289-key.pem https://ForemanSmartProxy.example.com/pulp/content/ORG/DEV/RHEL_7/content/dist/rhel/server/7/7Server
/x86_64/os/repodata/repomd.xml
403: A client certificate was not received via the `X-CLIENT-CERT` header.
</pre>

Comment 1 Eric Helms 2021-05-18 22:14:12 UTC

Created from redmine issue https://projects.theforeman.org/issues/32622

Comment 2 Eric Helms 2021-05-18 22:14:14 UTC

Upstream bug assigned to ehelms

Comment 3 Bryan Kearney 2021-05-20 20:02:49 UTC

Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/32622 has been resolved.

Comment 6 Devendra Singh 2021-08-30 13:58:41 UTC

Verified on 6.10 Snap15

Comment 9 errata-xmlrpc 2021-11-16 14:10:56 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.10 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4702