Bug 760962

Summary: <clientcert> not automatically included in system templates
Product: Red Hat Satellite Reporter: James Laska <jlaska>
Component: Content ManagementAssignee: Katello Bug Bin <katello-bugs>
Status: CLOSED DUPLICATE QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0.0CC: bkearney, jsherril, jturner
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-01-22 21:42:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
template.xml (missing <clientcert>) none

Description James Laska 2011-12-07 13:00:10 UTC
Created attachment 541943 [details]
template.xml (missing <clientcert>)

Description of problem:

It seems the Org uebercert is not automatically included in generated system templates for promoted content.

The <clientcert> is included

Version-Release number of selected component (if applicable):
 * candlepin-0.5.3-1.el6.src.rpm
 * katello-0.1.126-2.el6.src.rpm
 * katello-certs-tools-1.0.1-1.el6.src.rpm
 * katello-cli-0.1.22-2.el6.src.rpm
 * katello-configure-0.1.26-2.el6.src.rpm
 * katello-httpd-ssl-key-pair-1.0-1.src.rpm
 * katello-qpid-broker-key-pair-1.0-1.src.rpm
 * katello-trusted-ssl-cert-1.0-1.src.rpm
 * pulp-0.0.248-3.el6.src.rpm

How reproducible:
 * Reproduced on RHEL6.2 system using both brew and upstream katello packages

Steps to Reproduce:
1. Click "Content Management" -> "System Templates"
2. Click a system template, then choose "Download"
  
Actual results:

See attached example template that is missing <clientcert>.  

Expected results:

Either ...
 1) The downloaded template should already include a <clientcert>
    or
 2) A warning dialog appears when downloading a template that a uebercert has not been generated

Additional info:

* The downloaded template does include an XML comment that indicates the template is broken, however I'm not sure that's enough.

    <!-- Template is not complete and will likely fail. -->
    <!--  - Uebercert for ACME_Corporation has not been generated. -->

* To ensure that <clientcert> is included in the template, one must follow the procedure below.  Afterwards, <clientcert> is included in any system templates.
  1) Click "Organizations"
  2) Click applicable org (e.g. ACME_Corporation)
  3) Click "Debug Certificate"
  4) Click "Ddownload"

Comment 4 Justin Sherrill 2013-01-22 21:42:19 UTC
I believe this was handled in bug 783576.  we no longer require the user to generate a cert before exporting a template.  If one has not been generated when the user clicks download, we generate it for them.   Going to close as a duplicate, if you feel it isn't, please reopen.

*** This bug has been marked as a duplicate of bug 783576 ***