Bug 794855

Summary: Wrong CA path in Client Configuration RPM procedure
Product: Red Hat Update Infrastructure for Cloud Providers Reporter: Carsten Clasohm <clasohm>
Component: DocumentationAssignee: Julie <juwu>
Status: CLOSED ERRATA QA Contact: Martin Kočí <mkoci>
Severity: medium Docs Contact:
Priority: high    
Version: 2.1CC: achan, jslagle, kbidarka, mkoci, sghai, snansi, ssato, tsanders
Target Milestone: ---Flags: juwu: needinfo+
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Previously, an extra procedural step was required for Client Entitlements regarding CA Certificates. The new update has automated the procedure and the step has been removed from the Client Entitlements Chapter of the RHUI Administration Guide.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-24 11:53:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 817736    
Bug Blocks:    

Description Carsten Clasohm 2012-02-17 19:20:08 UTC
On http://docs.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.0/html/Installation_Guide/chap-Installation_Guide-Client_Entitlements.html, in step 7 of "Procedure 7.2. Create a Client Configuration RPM", the instructions tell us to use /etc/pki/rhui/entitlement-ca.crt as the CA certificate with which clients are going to verify the CDS server certificate.

This is the wrong file - it contains the CA which is used to sign the client entitlement certificates.

The correct file is the CA certificate from Procedure 3.1 on http://docs.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.0/html/Installation_Guide/chap-Installation_Guide-RHUI_Installer.html#sect-Installation_Guide-RHUI_Installer-Setting_up_SSL

Comment 1 Julie 2012-05-29 06:56:34 UTC
More info needed: Need the full path location of the required CA in procedure 3.1

Comment 2 James Slagle 2012-06-12 12:55:02 UTC
We've actually decided to remove this prompt from the client configuration rpm creation.  We're now reading this path from the config file at /etc/rhui/rhui-tools.conf, rhua.ssl_ca_cert setting.

We need to update the docs to remove this prompt from the sample screen capture.  If you want, you can add a note to the docs about this change.

Comment 4 James Slagle 2012-06-13 14:30:41 UTC
The path is /etc/pki/rhua/rhua-ssl-ca-cert.crt, but we're removing this prompt from procedure 7.2

Comment 7 Martin Kočí 2012-07-26 11:43:39 UTC
This prompt is removed from the documentation. See the step 7. which is in 2.1 like step 8. in 2.0.
http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.1/html/Administration_Guide/chap-Administration_Guide-Client_Entitlements.html
Note: the procedure is in 2.1 version 4.2 instead of 7.2 in old version 2.0.
Moving bug to VERIFIED

Comment 8 Dan Macpherson 2012-08-14 04:41:39 UTC
*** Bug 810854 has been marked as a duplicate of this bug. ***

Comment 9 Athene Chan 2012-08-15 00:09:57 UTC
Previously A step was removed from the "Client Entitlements: section of the RHUI Administration Guide

Comment 10 Athene Chan 2012-08-15 00:09:57 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, an extra procedural step was required for Client Entitlements regarding CA Certificates. The new update has automated the procedure and the step has been removed from the Client Entitlements Chapter of the RHUI Administration Guide.

Comment 12 errata-xmlrpc 2012-08-24 11:53:24 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2012-1205.html