Bug 1982670
| Summary: | Entitlement certificate related errors logged in /var/log/rhsm/rhsm.log when simple content access enabled. | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | mithun kalyat <mkalyat> | |
| Component: | subscription-manager | Assignee: | Pino Toscano <ptoscano> | |
| Status: | VERIFIED --- | QA Contact: | Red Hat subscription-manager QE Team <rhsm-qe> | |
| Severity: | high | Docs Contact: | ||
| Priority: | high | |||
| Version: | 8.4 | CC: | ahumbe, dhjoshi, jsefler, jstavel, pbadguja, peter.vreman, redakkan, saydas, shughes, snarya, tasander, zpetrace | |
| Target Milestone: | beta | Keywords: | Triaged, ZStream | |
| Target Release: | 8.9 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | subscription-manager-1.28.37-1.el8 | Doc Type: | No Doc Update | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2178610 2221709 (view as bug list) | Environment: | ||
| Last Closed: | Type: | Bug | ||
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 2178610 | |||
| Bug Blocks: | 2221709 | |||
The warning appeared in the system.
no warning about certificate appeared after I've updated the packages:
subscription-manager-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
subscription-manager-cockpit-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.noarch
subscription-manager-rhsm-certificates-1.28.32-1.el8.x86_64
dnf-plugin-subscription-manager-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
python3-cloud-what-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
python3-subscription-manager-rhsm-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
python3-syspurpose-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
rhsm-icons-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.noarch
Final verification with help of ansible playbook was done on a SUBMAN version:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] =>
msg: |-
server type: Red Hat Subscription Management
subscription management server: 4.2.15-1
subscription management rules: 5.43
subscription-manager: 1.28.37-1.el8
Registering the system with account with SCA enabled:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] =>
msg: |-
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
The system has been registered with ID: 07c8afc8-e782-4cfb-bb92-3623add54a18
The registered system name is: kvm-02-guest17.rhts.eng.brq.redhat.com
Ignoring the request to auto-attach. Attaching subscriptions is disabled for organization "16770451" because Simple Content Access (SCA) is enabled.
List of installed products:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] =>
msg: |-
+-------------------------------------------+
Installed Product Status
+-------------------------------------------+
Product Name: Red Hat CloudForms
Product ID: 167
Version: 4.7
Arch: x86_64
Status: Unknown
Status Details:
Starts:
Ends:
Product Name: Red Hat Enterprise Linux for x86_64 Beta
Product ID: 486
Version: 8.9 Beta
Arch: x86_64
Status: Unknown
Status Details:
Starts:
Ends:
After updating the certificates, no warning or error message was found in /var/log/rhsm/rhsm.log:
...
2023-05-11 18:03:55,899 [DEBUG] subscription-manager:17241:MainThread @connection.py:779 - Making request: GET /subscription/consumers/07c8afc8-e782-4cfb-bb92-3623add54a18/certificates?serials=951381933255591752
2023-05-11 18:03:56,802 [DEBUG] subscription-manager:17241:MainThread @connection.py:884 - Response time: 0.6355688571929932, Smoothed response time: 0.4077358908653259
2023-05-11 18:03:56,902 [DEBUG] subscription-manager:17241:MainThread @connection.py:861 - Response: status=200, requestUuid=f10b0b7f-3e34-477f-a3e1-9e3d1fdf2a05, request="GET /subscription/consumers/07c8afc8-e782-4cfb-bb92-3623add54a18/certificates?serials=951381933255591752"
2023-05-11 18:03:56,904 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:400 - Ent cert bundle pre_install
2023-05-11 18:03:56,949 [DEBUG] subscription-manager:17241:MainThread @certdirectory.py:386 - Writing key file: '/etc/pki/entitlement/951381933255591752-key.pem'
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @certdirectory.py:391 - Writing certificate file: '/etc/pki/entitlement/951381933255591752.pem'
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:422 - ent cert bundle post_install
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:351 - cert bundles post_install: <rhsm.certificate2.EntitlementCertificate object at 0x7fae597fba58>
2023-05-11 18:03:56,950 [INFO] subscription-manager:17241:MainThread @entcertlib.py:132 - certs updated:
Total updates: 1
...
*** Bug 2211676 has been marked as a duplicate of this bug. *** |
Description of problem: System is registered to Satellite successfully using SCA but some entitlement certificate related messages/errors are keep getting generated in /var/log/rhsm/rhsm.log. Steps to Reproduce: [root@rhel8client ~]# cat /etc/redhat-release Red Hat Enterprise Linux release 8.3 (Ootpa) [root@rhel8client ~]# rpm -qa | grep subscription-manager subscription-manager-1.28.13-3.el8_4.x86_64 subscription-manager-rhsm-certificates-1.28.13-3.el8_4.x86_64 dnf-plugin-subscription-manager-1.28.13-3.el8_4.x86_64 subscription-manager-cockpit-1.28.13-3.el8_4.noarch python3-subscription-manager-rhsm-1.28.13-3.el8_4.x86_64 [root@rhel8client ~]# syspurpose show {} [root@rhel8client ~]# syspurpose set-role "Red Hat Enterprise Linux Workstation" role set to "Red Hat Enterprise Linux Workstation". [root@rhel8client ~]# syspurpose show { "role": "Red Hat Enterprise Linux Workstation" } [root@rhel8client ~]# subscription-manager status +-------------------------------------------+ System Status Details +-------------------------------------------+ Overall Status: Disabled Content Access Mode is set to Simple Content Access. This host has access to content, regardless of subscription status. System Purpose Status: Disabled [root@rhel8client ~]# ls /etc/pki/product-default/ 479.pem [root@rhel8client ~]# yum update -y [root@rhel8client ~]# cat /etc/redhat-release Red Hat Enterprise Linux release 8.4 (Ootpa) [root@rhel8client ~]# syspurpose show { "role": "Red Hat Enterprise Linux Workstation" [root@rhel8client ~]# ls /etc/pki/product product/ product-default/ [root@rhel8client ~]# ls /etc/pki/product-default/ 479.pem /var/log/rhsm/rhsm.log Total updates: 1 Found (local) serial# [] Expected (UEP) serial# [5615889862954254283] Added (new) [sn:5615889862954254283 ( Content Access,) @ /etc/pki/entitlement/5615889862954254283.pem] Deleted (rogue): <NONE> 2021-07-11 09:26:31,973 [WARNING] subscription-manager:5798:MainThread @cert_sorter.py:194 - Installed product 479 not present in response from server. 2021-07-11 09:26:50,363 [INFO] yum:5803:MainThread @entcertlib.py:131 - certs updated: Total updates: 1 Found (local) serial# [] Expected (UEP) serial# [5615889862954254283] Added (new) [sn:5615889862954254283 ( Content Access,) @ /etc/pki/entitlement/5615889862954254283.pem] Deleted (rogue): Actual results: Above error generated in /var/log/rhsm/rhsm.log Expected results: Need to avoid unwanted messages from the logs.