Bug 2221711

Summary: Entitlement certificate related errors logged in /var/log/rhsm/rhsm.log when simple content access enabled. [rhel-9.2.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: subscription-managerAssignee: Pino Toscano <ptoscano>
Status: CLOSED ERRATA QA Contact: Red Hat subscription-manager QE Team <rhsm-qe>
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: ahumbe, candlepin-bugs, dhjoshi, jsefler, jstavel, mkalyat, pbadguja, peter.vreman, redakkan, rhsm-qe, saydas, shughes, zpetrace
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: 9.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: subscription-manager-1.29.33.2-1.el9_2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2178610 Environment:
Last Closed: 2023-11-21 10:00:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2178610    
Bug Blocks:    

Comment 1 Zdenek Petracek 2023-09-11 09:41:39 UTC
[root@kvm-01-guest16 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.2 (Plow)

[root@kvm-01-guest16 ~]# rpm -qa | grep subscription-manager
subscription-manager-rhsm-certificates-20220623-1.git.0.1ccb22c.el9.noarch
python3-subscription-manager-rhsm-1.29.33.1+10.g2191cc134-1.git.0.698adc1.x86_64
libdnf-plugin-subscription-manager-1.29.33.1+10.g2191cc134-1.git.0.698adc1.x86_64
subscription-manager-1.29.33.1+10.g2191cc134-1.git.0.698adc1.x86_64

[root@kvm-01-guest16 ~]# subscription-manager syspurpose --show
{
  "addons": [],
  "role": "",
  "service_level_agreement": "",
  "usage": ""
}


[root@kvm-01-guest16 ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: sca_test
Password: 
The system has been registered with ID: 7e4ffe4c-2fb8-480d-823f-a4ad80484870
The registered system name is: kvm-01-guest16.lab.eng.brq2.redhat.com

[root@kvm-01-guest16 ~]# subscription-manager status
+-------------------------------------------+
   System Status Details
+-------------------------------------------+
Overall Status: Disabled
Content Access Mode is set to Simple Content Access. This host has access to content, regardless of subscription status.

System Purpose Status: Disabled

[root@kvm-01-guest16 ~]# ls /etc/pki/product-default/
479.pem

[root@kvm-01-guest16 ~]# yum update -y
...
Installed:
  grub2-tools-efi-1:2.06-61.el9_2.1.x86_64               grub2-tools-extra-1:2.06-61.el9_2.1.x86_64       
  kbd-legacy-2.4.0-9.el9.noarch                          kernel-5.14.0-284.30.1.el9_2.x86_64              
  kernel-core-5.14.0-284.30.1.el9_2.x86_64               kernel-modules-5.14.0-284.30.1.el9_2.x86_64      
  kernel-modules-core-5.14.0-284.30.1.el9_2.x86_64      

Complete!

[root@kvm-01-guest16 ~]# ls /etc/pki/product-default/
479.pem

/var/log/rhsm/rhsm.log
...
2023-09-11 11:37:07,862 [WARNING] yum:21754:MainThread @logutil.py:175 - logging already initialized
2023-09-11 11:37:08,231 [INFO] yum:21754:MainThread @productid.py:550 - Updating product db with 479 -> rhel-9-for-x86_64-appstream-rpms
2023-09-11 11:37:08,231 [INFO] yum:21754:MainThread @productid.py:550 - Updating product db with 479 -> rhel-9-for-x86_64-baseos-rpms
2023-09-11 11:37:08,232 [INFO] yum:21754:MainThread @productid.py:601 - Installed product cert 479: Red Hat Enterprise Linux for x86_64 /etc/pki/product/479.pem
2023-09-11 11:37:08,232 [INFO] yum:21754:MainThread @productid.py:601 - Installed product cert 479: Red Hat Enterprise Linux for x86_64 /etc/pki/product/479.pem
^^ No error shown, certificates successfully updated --> pre-verification PASSED

Comment 9 Zdenek Petracek 2023-09-15 09:36:22 UTC
Pre-verification done on SUBMAN version:
[root@kvm-02-guest07 ~]# subscription-manager version
server type: This system is currently not registered.
subscription management server: 4.3.7-2
subscription management rules: 5.44
subscription-manager: 1.29.33.2-1.el9_2

[root@kvm-02-guest07 ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.2 (Plow)

[root@kvm-02-guest07 ~]# subscription-manager syspurpose --show
{}

[root@kvm-02-guest07 ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: sca_test
Password: 
The system has been registered with ID: 1a69fa91-1a46-4bee-aa2d-57ddb7c6eec9
The registered system name is: kvm-02-guest07.rhts.eng.brq.redhat.com
[root@kvm-02-guest07 ~]# subscription-manager status
+-------------------------------------------+
   System Status Details
+-------------------------------------------+
Overall Status: Disabled
Content Access Mode is set to Simple Content Access. This host has access to content, regardless of subscription status.

System Purpose Status: Disabled

[root@kvm-02-guest07 ~]# ls /etc/pki/product-default/
479.pem

[root@kvm-02-guest07 ~]# yum update -y
Updating Subscription Management repositories.
Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)                                                                               9.8 MB/s |  14 MB     00:01    
Red Hat Enterprise Linux 9 for x86_64 - AppStream (RPMs)                                                                             18 MB/s |  24 MB     00:01    
Dependencies resolved.
...
Installed:
  grub2-tools-efi-1:2.06-61.el9_2.1.x86_64          grub2-tools-extra-1:2.06-61.el9_2.1.x86_64           kernel-5.14.0-284.30.1.el9_2.x86_64                      
  kernel-core-5.14.0-284.30.1.el9_2.x86_64          kernel-modules-5.14.0-284.30.1.el9_2.x86_64          kernel-modules-core-5.14.0-284.30.1.el9_2.x86_64         

Complete!

[root@kvm-02-guest07 ~]# cat /var/log/rhsm/rhsm.log
...
2023-09-15 11:34:15,127 [WARNING] yum:17410:MainThread @logutil.py:175 - logging already initialized
2023-09-15 11:34:15,354 [INFO] yum:17410:MainThread @productid.py:550 - Updating product db with 479 -> rhel-9-for-x86_64-baseos-rpms
2023-09-15 11:34:15,354 [INFO] yum:17410:MainThread @productid.py:550 - Updating product db with 479 -> rhel-9-for-x86_64-appstream-rpms
^^ Noo error-message shown here and content was successfully reached

Comment 13 errata-xmlrpc 2023-11-21 10:00:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (subscription-manager bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:7362