| Summary: | base RHEL61 product id certs are not getting installed into /etc/pki/product | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | John Sefler <jsefler> |
| Component: | releng | Assignee: | Dennis Gregorovic <dgregor> |
| Status: | CLOSED ERRATA | QA Contact: | Release Test Team <release-test-team> |
| Severity: | high | Docs Contact: | |
| Priority: | urgent | ||
| Version: | 6.1 | CC: | atodorov, dmach, mkhusid, syeghiay |
| Target Milestone: | beta | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Beta | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-06-09 19:07:04 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | |||
| Bug Blocks: | 568421 | ||
|
Description
John Sefler
2011-03-16 17:39:03 UTC
We have a high degree of confidence that we know what the problem and solution are. We have the following directory structure:
os/
repodata/
Server/
repodata/
HighAvailability/
repodata/
LoadBalancer/
repodata/
...
Up until recently, os/repodata was simply a symlink to Server/repodata. As part of the recent tree layout shuffle, os/repodata because a standalone directory. Unfortunately, I did not make the necessary code changes to get the product certificate into os/repodata when that switch was made. The certificate is still in Server/repodata, but that's not where anaconda is pulling from.
So, the fix is to add the product certificate to os/repodata. This is a simple change. I have checked it into CVS and have a new compose underway.
Compose has completed and handed off to QE for verification. Verifying installs (Server, Workstation, ComputeNode) from latest composes: http://download.lab.bos.redhat.com/rel-eng/RHEL-6.1-Beta-1.2/ [root@jsefler-betastage-computenode ~]# openssl x509 -text -in /etc/pki/product/76.pem | grep -A1 1.3.6.1.4.1.2312.9.1 1.3.6.1.4.1.2312.9.1.76.1: .3Red Hat Enterprise Linux 6 for Scientific Computing 1.3.6.1.4.1.2312.9.1.76.2: ..6.1-Beta 1.3.6.1.4.1.2312.9.1.76.3: ..x86_64 1.3.6.1.4.1.2312.9.1.76.4: ..rhel-6,rhel-6-computenode [root@jsefler-betastage-workstation ~]# openssl x509 -text -in /etc/pki/product/71.pem | grep -A1 1.3.6.1.4.1.2312.9.1 1.3.6.1.4.1.2312.9.1.71.1: .&Red Hat Enterprise Linux 6 Workstation 1.3.6.1.4.1.2312.9.1.71.2: ..6.1-Beta 1.3.6.1.4.1.2312.9.1.71.3: ..x86_64 1.3.6.1.4.1.2312.9.1.71.4: ..rhel-6,rhel-6-workstation [root@jsefler-betastage-server ~]# openssl x509 -text -in /etc/pki/product/69.pem | grep -A1 1.3.6.1.4.1.2312.9.1 1.3.6.1.4.1.2312.9.1.69.1: .!Red Hat Enterprise Linux 6 Server 1.3.6.1.4.1.2312.9.1.69.2: ..6.1-Beta 1.3.6.1.4.1.2312.9.1.69.3: ..x86_64 1.3.6.1.4.1.2312.9.1.69.4: ..rhel-6,rhel-6-server I consider this verified. An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2011-0540.html |