Bug 705476

Summary:	Allow a SSL ca cert to be passed into a repo to use for verifcation
Product:	[Retired] Pulp	Reporter:	John Matthews <jmatthew>
Component:	z_other	Assignee:	John Matthews <jmatthew>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Preethi Thomas <pthomas>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	unspecified	Keywords:	Triaged
Target Milestone:	---
Target Release:	Sprint 24
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-24 20:15:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description John Matthews 2011-05-17 18:50:07 UTC

Pulp/Grinder were requiring a key, cert, and ca_cert in order to verify a SSL connection.  This bug addresseses the need to allow just the ca_cert to be added to a repo to verify the SSL connection.  


Version-Release number of selected component (if applicable):
pulp 177
grinder 0.97



Steps to Reproduce:
1. Host a repo with a https connection
2. Create a repo and add a --feed_ca
3. Sync the repo
  
Actual results:
Error, unable to fetch metadata

Expected results:
Sync should work and grinder/pulp will verify with the --feed_ca

Additional info:

Comment 1 John Matthews 2011-05-17 18:52:24 UTC

Also need to add support so we can view that a ca_cert/key were added in a repo list.

Currently repo list displays just info on 'feed_cert' or 'consumer_cert'

Id                 	rhel6_x86_64_debug       
Name               	rhel6_x86_64_debug       
Feed URL           	https://pulp-dev.app.eng.bos.redhat.com/pulp/repos/released/RHEL-6-Client/6.0/x86_64/debug/
Feed Type          	remote                   
Feed Certs         	No                       
Consumer Certs     	No                       
Architecture       	noarch                   
Sync Schedule      	None                     
Packages           	1374                     
Files              	0                        
Distributions      	None                     
Publish            	True                     
Clones             	[]                       
Groups             	None                     
Filters            	[]                       
Notes              	{}

Comment 2 John Matthews 2011-05-18 21:06:05 UTC

Fixed with this commit

http://git.fedorahosted.org/git/?p=pulp.git;a=commitdiff;h=5e0b56393dcf1e5220fa210972696ead0bc338fc

Comment 3 Jeff Ortel 2011-05-18 21:07:01 UTC

build: 0.178

Comment 4 Preethi Thomas 2011-09-21 20:46:36 UTC

verified
[root@preethi ~]# rpm -q pulp
pulp-0.0.232-1.fc15.noarch

[root@preethi ~]# pulp-admin -u admin -p admin repo create --preserve_metadata --id=protected_test_repo2  --feed=https://cdn.redhat.com/content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2.0/os --feed_ca=/root/cdn_certs/rhui-rhqe/cdn.redhat.com-chain.crt --feed_cert=/root/cdn_certs/rhui-rhqe/rhui-rhqe-20110803.crt --feed_key=/root/cdn_certs/rhui-rhqe/rhui-rhqe-20110803.key 
Successfully created repository [ protected_test_repo2 ]


[root@preethi ~]# 
[root@preethi ~]# pulp-admin -u admin -p admin repo sync --id=protected_test_repo2 -F
Sync for repository protected_test_repo2 started
Sync: Finished
32/32 new items downloaded
0/32 existing items processed

Item Details: 
Rpms: 32/32

Comment 5 Preethi Thomas 2012-02-24 20:15:37 UTC

Pulp v1.0 is released
Closed Current Release.

Comment 6 Preethi Thomas 2012-02-24 20:17:14 UTC

Pulp v1.0 is released.