Red Hat Bugzilla – Bug 1191117
Backport SSL client verification refactoring into Satellite 6.1
Last modified: 2017-02-23 15:33:34 EST
Hi, we need to get this patch into Satellite 6.1: https://github.com/theforeman/smart-proxy/pull/253/files And then for all supported smart proxy plugins: http://projects.theforeman.org/projects/foreman/wiki/List_of_Smart-Proxy_Plugins I will submit PRs for all the plugin repositories and attach the patches here. They will all be same, one liners. The first one that was already merged upstream is: https://github.com/theforeman/smart_proxy_abrt/pull/3/files Document URL: Section Number and Name: Describe the issue: Suggestions for improvement: Additional information: Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: Document URL: Section Number and Name: Describe the issue: Suggestions for improvement: Additional information: Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: Document URL: Section Number and Name: Describe the issue: Suggestions for improvement: Additional information: Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info: Document URL: Section Number and Name: Describe the issue: Suggestions for improvement: Additional information: Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Sorry for the body above. Disregard the rest :-)
Okay so it looks we have only three proxy plugins in Satellite 6.1: ABRT, OpenSCAP, Pulp. Added Martin Milata, Simon Lukasik and Justin Sherrill to give me assistance when needed. My goal in this BZ is to push this change into all the upstream projects, and then allow our rel-engs to backport it The patch looks like this: https://github.com/theforeman/smart_proxy_abrt/pull/3/files I will file PRs into OpenSCAP and Pulp soon. Thanks for cooperation.
Verified with: Sat6.1 beta snap4 compose2 Satellite-6.1.0-RHEL-6-20150225.0 As per comment5, discovery via proxy plugin works fine. I can discover host via proxy and provision it. [root@dhcp207-190 ~]# tail -f /var/log/foreman-proxy/proxy.log 10.65.207.190 - - [03/Mar/2015 11:20:51] "POST /tftp/create_default HTTP/1.1" 200 - 0.0424 192.168.100.11 - - [03/Mar/2015 11:25:54] "POST /discovery/create HTTP/1.1" 200 - 1.1257
This bug is slated to be released with Satellite 6.1.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2015:1592