Bug 463965

Summary:	Problem with Certs generation during installation process.
Product:	[Community] Spacewalk	Reporter:	Chris <krzychk2>
Component:	Installation	Assignee:	Pradeep Kilambi <pkilambi>
Status:	CLOSED NOTABUG	QA Contact:	Red Hat Satellite QA List <satqe-list>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	0.2	CC:	jesusr
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-02-24 22:10:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	456553

Description Chris 2008-09-25 18:02:21 UTC

Description of problem: Certificate that is generated during installation process is wrong and client can't use a ssl connection. 


Version-Release number of selected component (if applicable): 0.2


How reproducible: Don't know. I've installed spacewalk, configured and tried to download the rpm with certificate. RPM successfully downloaded and installed but when I tried to use rhn tools to register client threw ssl connection it always says that the certificate is wrong.


Steps to Reproduce:
1.
2.
3.
  
Actual results:
Wrong certificate. Can't use an ssl connection during client installation.


Expected results:
Possibility of using SSL connection while registering clients.

Additional info: none

Comment 2 Pradeep Kilambi 2009-02-24 22:10:08 UTC

Sounds to me like the client is looking at the wrong certfile. 

Try these steps and lemme know if you still see this:

* Generate your SSL cert or use the one during install

* Once the cert is generated, move it to /usr/share/rhn/ on server(so you remember where it is)

* copy the cert over to the client under /usr/share/rhn

* edit /etc/sysconfig/rhn/up2date on client and include sslCACert=/usr/share/rhn/<your-cert> and serverUrl= <your-spacewalk>

* re-register and retry

This should enable the client to look for the cert in the right place. If you still have issues, please reopen the bug.

~ Prad