Bug 131472 - ssl section / rhn-ssl-tool logic mismatch
Summary: ssl section / rhn-ssl-tool logic mismatch
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite 5
Classification: Red Hat
Component: Installer
Version: 360
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Robin Norwood
QA Contact: Max Spevack
URL:
Whiteboard:
Depends On:
Blocks: rhn360sat
TreeView+ depends on / blocked
 
Reported: 2004-09-01 17:12 UTC by Todd Warner
Modified: 2007-08-06 15:59 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-03-22 17:48:57 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Todd Warner 2004-09-01 17:12:52 UTC 
The behavior of rhn-ssl-tool's hostname/directory-generation logic:
command: rhn-ssl-tool --set-hostname chimchim.devel.redhat.com
directory generated: ~/ssl-build/chimchim.devel/

command: rhn-ssl-tool --set-hostname chimchim.redhat.com
directory generated: ~/ssl-build/chimchim/

command: rhn-ssl-tool --set-hostname chimchim.not_FQDN
directory generated: ~/ssl-build/chimchim.not_FQDN/

Case #3 shows where the tool can't "intelligently" determine the
machine name so it punts.
Comment 1 Todd Warner 2004-09-01 17:14:38 UTC 
Oh... forgot to add... the website does this:

command: rhn-ssl-tool --set-hostname chimchim.devel.redhat.com
directory generated: ~/ssl-build/chimchim.devel/

command: rhn-ssl-tool --set-hostname chimchim.redhat.com
directory generated: ~/ssl-build/chimchim.redhat/

command: rhn-ssl-tool --set-hostname chimchim.not_FQDN
directory generated: ~/ssl-build/chimchim.not_FQDN/

I.e., it just picks the first two period deliminated thingies... bad!
Comment 2 Todd Warner 2004-09-01 17:16:14 UTC 
De-privatized the bug... no reason to hide it.
Comment 3 Robin Norwood 2004-09-27 14:17:55 UTC 
Fixed in CVS.

Test plan: Run a satellite install with a valid 3-part hostname
'foo.bar.com' - The SSL server key generated should be for 'foo', not
'foo.bar'.
Comment 4 Todd Warner 2004-10-21 16:38:10 UTC 
QA push. {ON_DEV,QA_READY} --> ON_QA
Comment 5 Max Spevack 2004-11-29 14:54:07 UTC 
Verified -- on test07.rhndev.redhat.com, the ssl-build directly
correctly created the certs, and placed them in ssl-build/test07.rhndev
Comment 6 Todd Warner 2005-03-22 17:48:57 UTC 
Mass move from PROD_READY to CLOSED:CURRENTRELEASE
Note You need to log in before you can comment on or make changes to this bug.