Bug 991247

Summary: nodes SSL certificate generated using hard coded path to the pulp CA cert
Product: [Retired] Pulp Reporter: Jeff Ortel <jortel>
Component: nodesAssignee: Jeff Ortel <jortel>
Status: CLOSED CURRENTRELEASE QA Contact: Preethi Thomas <pthomas>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.2 BetaCC: jsherril, mhrivnak
Target Milestone: ---Keywords: FutureFeature, Triaged
Target Release: 2.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-09 14:31:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jeff Ortel 2013-08-02 00:52:52 UTC
The %post of the nodes.spec generates the SSL certificate generated using hard coded path to the pulp CA cert.  The script needs to be broken out into a separate shell script used by the rpm.  The script needs to read the CA cert location from /etc/pulp/server.conf.  The script can them be called later to regenerate the certificate if the CA is changed in server.conf.

Comment 1 Jeff Ortel 2013-08-14 22:03:34 UTC
https://github.com/pulp/pulp/pull/561

Comment 2 Jeff Ortel 2013-09-12 22:36:05 UTC
build: 2.3.0-0.10.alpha

Comment 3 Jeff Ortel 2013-10-07 20:45:15 UTC
Suggest: verify by running the /usr/bin/pulp-gen-nodes-certificate.  It reads the location of the pulp CA from server.conf and writes it to the location specified in the nodes.conf.  playing with those values and check to see that the certificate is written in the location expected.

Comment 4 Preethi Thomas 2013-10-08 13:43:52 UTC
verified

[root@pulp-v2-server ~]# cat /etc/pulp/server.conf |grep crt
cacert: /etc/pki/pulp/ca.crt
ssl_ca_certificate: /etc/pki/pulp/ssl_ca.crt
cacert: /etc/pki/qpid/ca/ca.crt


[root@pulp-v2-server ~]# cat /etc/pulp/nodes.conf |grep crt
#node_certificate: /etc/pki/pulp/nodes/node.crt
node_certificate: /tmp/nodes/node.crt
[root@pulp-v2-server ~]# 
[root@pulp-v2-server ~]# /usr/bin/pulp-gen-nodes-certificate 
[root@pulp-v2-server ~]# 
[root@pulp-v2-server ~]# ls /tmp/nodes/
node.crt
[root@pulp-v2-server ~]#

Comment 5 Preethi Thomas 2013-12-09 14:31:55 UTC
Pulp 2.3 released.