Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1059754

Summary: [qemu-ga-win] Installer files (MSI) should be signed with Red Hat certificate
Product: Red Hat Enterprise Linux 7 Reporter: Yvugenfi <yvugenfi>
Component: virtio-winAssignee: Yvugenfi <yvugenfi>
Status: CLOSED CURRENTRELEASE QA Contact: Virtualization Bugs <virt-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: acathrow, bcao, flang, juzhang, qzhang, rhod, sluo, virt-maint, yvugenfi
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-13 10:53:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1073208    
Attachments:
Description Flags
Red hat certificate none

Description Yvugenfi@redhat.com 2014-01-30 14:59:38 UTC
Description of problem:
The installer binary is not signed during the build.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 4 langfang 2014-03-20 07:20:22 UTC
Verify this bug as follow version:

Version:
# uname -r 
3.10.0-111.el7.x86_64
# rpm -q qemu-kvm-rhev
qemu-kvm-rhev-1.5.3-53.el7.x86_64

Guest:
qemu-ga-win-7.0-7

virtio-win-prewhql-0.1-74

steps:
1.Boot guest with 
..-device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x7 -chardev socket,path=/tmp/qga.sock,server,nowait,id=qga0 -device virtserialport,bus=virtio-serial0.0,chardev=qga0,name=org.qemu.guest_agent.0..

2.Download "qemu-ga-x64.msi " and install it in guest

3.Install serial device driver

4.On host
# nc -U /tmp/qga.sock 
{ "execute": "guest-ping" }
{"return": {}}
{ "execute": "guest-ping" }
{"return": {}}


4.Check qemu-ga Digital Signatures---->see attachment

see qemu-ga-x64---->"Properties"--->Press "Digital Signature"--->Press "Red Hat,Inc."--->Press "view Certificate"-->you will see "Red Hat certificate"


Hi,Yan 

  Could we can verify this bug as above test ? thanks 


thanks 

fang lang

Comment 5 langfang 2014-03-20 07:21:15 UTC
Created attachment 876718 [details]
Red hat certificate

Comment 6 Yvugenfi@redhat.com 2014-03-21 08:15:56 UTC
(In reply to langfang from comment #4)
> Verify this bug as follow version:
> 
> Version:
> # uname -r 
> 3.10.0-111.el7.x86_64
> # rpm -q qemu-kvm-rhev
> qemu-kvm-rhev-1.5.3-53.el7.x86_64
> 
> Guest:
> qemu-ga-win-7.0-7
> 
> virtio-win-prewhql-0.1-74
> 
> steps:
> 1.Boot guest with 
> ..-device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x7 -chardev
> socket,path=/tmp/qga.sock,server,nowait,id=qga0 -device
> virtserialport,bus=virtio-serial0.0,chardev=qga0,name=org.qemu.guest_agent.0.
> .
> 
> 2.Download "qemu-ga-x64.msi " and install it in guest
> 
> 3.Install serial device driver
> 
> 4.On host
> # nc -U /tmp/qga.sock 
> { "execute": "guest-ping" }
> {"return": {}}
> { "execute": "guest-ping" }
> {"return": {}}
> 
> 
> 4.Check qemu-ga Digital Signatures---->see attachment
> 
> see qemu-ga-x64---->"Properties"--->Press "Digital Signature"--->Press "Red
> Hat,Inc."--->Press "view Certificate"-->you will see "Red Hat certificate"
> 
> 
> Hi,Yan 
> 
>   Could we can verify this bug as above test ? thanks 
> 
> 
> thanks 
> 
> fang lang

Hi,

The procedure is OK, but you need to test both 64bit and 32bit installers. 
So it is qemu-ga-x64.msi and qemu-ga-x86.msi. 
You can look at the certificate on any guest, but if you install it than it should be done on 32bit or 64bit guest according to the installer type.guest.

Best regards,
Yan.

Comment 7 Sibiao Luo 2014-03-25 06:01:45 UTC
1.Verify the qemu-ga-win-7.0-7 version with both qemu-ga-x64.msi and qemu-ga-x86.msi installers which were signed with Red Hat certificate correctly.

2.Verify the windows desktop and server guest install qemu-ga-win-7.0-7 and execute the simple virtagent commands successfully which just like comment #4 comment.

host info:
# uname -r && rpm -q qemu-kvm-rhev
3.10.0-113.el7.x86_64
qemu-kvm-rhev-1.5.3-57.el7ev.x86_64

qemu-ga-x64.msi:
win7-64         -----   install and work well
win2008-64      -----   install and work well

qemu-ga-x86.msi:
win7-32         -----   install and work well
win2008-32      -----   install and work well

Base on above, this issue has been fixed correctly, we can move it to VERIFIED status if no mistake, thanks.

Best Regards,
sluo

Comment 8 juzhang 2014-03-25 06:04:48 UTC
According to comment4, comment6 and comment7, set this issue as verified.

Comment 9 Ludek Smid 2014-06-13 10:53:20 UTC
This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.