Bug 82846

Summary: can't use SSL through RHN Proxy Server
Product: Red Hat Enterprise Linux 2.1 Reporter: Steve Bonneville <sbonnevi>
Component: rhn_registerAssignee: Adrian Likins <alikins>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 2.1   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-09-05 14:13:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
tethereal output none

Description Steve Bonneville 2003-01-27 17:10:43 UTC 
Description of problem:

When trying to use rhn_register to register an Advanced Server client through
a RHN Proxy Server, can not use SSL because rhn_register is too old and no
errata is available.  Non-SSL connections from the client to the Proxy Server work.

Version-Release number of selected component (if applicable):

Tested with rhn_register-2.7.9-7.x.2 and the rhn-proxy-1.1-62 ISO for AS.
Documentation with the rhn-proxy-1.1-62 ISO specifies that I need to have at
least rhn_register-2.7.11-? on the clients for this to work (RHN-proxy-IC.pdf
guide, page 44), but the errata package doesn't seem to be available for AS2.1.
The rhns-ca-cert-1.0-1.noarch.rpm built by my proxy server is installed on the
client.  Both proxy server and client used AS2.1.

How reproducible: Always.  :)

It looks like the sslCACert directive in /etc/sysconfig/rhn/rhn_register is not
honored by this version of rhn_register.    Tethereal output is attached,
station3 is the Proxy Server and station4 is the client.

Connection through the proxy server does not work with these settings in the
client's /etc/sysconfig/rhn/rhn_register file:

  serverURL=https://station3.example.com/XMLRPC
  sslCACert=/usr/share/rhn/RHNS-CORP-CA-CERT

but it does work with:

  serverURL=http://station3.example.com/XMLRPC
Comment 1 Steve Bonneville 2003-01-27 17:12:48 UTC 
Created attachment 89621 [details]
tethereal output
Comment 2 Steve Bonneville 2003-09-05 14:13:09 UTC 
Works with rhn_register-2.8.34-1.2.1AS.  Closing bug.