Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1329708

Summary: 'yum whatprovides sshfs' results in SEC_ERROR_BAD_KEY with on-demand repo
Product: Red Hat Satellite Reporter: Tom McKay <tomckay>
Component: Hosts - ContentAssignee: satellite6-bugs <satellite6-bugs>
Status: CLOSED WONTFIX QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.2.0CC: bbuckingham, bkearney, dlobatog, inecas, mhrivnak
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-09-13 17:22:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tom McKay 2016-04-22 16:19:10 UTC 
I enabled "Red Hat Enterprise Linux 7 Server RPMs x86_64 7Server" on-demand download policy and synced. I registered a host (sat-6.2 server itself) and assigned RHEL sub. Successfully "yum install -y emacs" and then tried "yum whatprovides sshfs"

$ yum whatprovides sshfs
Loaded plugins: product-id, search-disabled-repos, subscription-manager
Repo rhel-7-server-rpms forced skip_if_unavailable=True due to: /etc/pki/entitlement/4207160575726252180-key.pem
rhel-7-server-rpms                                                                            10649/10649
https://sat62.example.com/pulp/repos/megacorp/Library/content/dist/rhel/server/7/7Server/x86_64/os/repodata/77f96a61f6f2b7fe58b83bf06c964e8b952225a6-filelists.xml.gz: [Errno 14] curl#58 - "unable to load client key: -8178 (SEC_ERROR_BAD_KEY)"
Trying other mirror.



Installed Packages

candlepin-0.9.54.4-1.el7.noarch
candlepin-common-1.0.22-1.el7.noarch
candlepin-guice-3.0-2_redhat_1.el7.noarch
candlepin-selinux-0.9.54.4-1.el7.noarch
foreman-installer-katello-3.0.0.19-1.el7sat.noarch
katello-3.0.0-3.el7sat.noarch
katello-ca-consumer-sat-perf-02.sat6.lab.eng.bos.redhat.com-1.0-4.noarch
katello-ca-consumer-sat62.example.com-1.0-1.noarch
katello-certs-tools-2.4.0-1.el7sat.noarch
katello-client-bootstrap-1.0.0-1.el7sat.noarch
katello-common-3.0.0-3.el7sat.noarch
katello-debug-3.0.0-3.el7sat.noarch
katello-default-ca-1.0-1.noarch
katello-installer-base-3.0.0.19-1.el7sat.noarch
katello-selinux-3.0.1.2-1.el7sat.noarch
katello-server-ca-1.0-1.noarch
katello-service-3.0.0-3.el7sat.noarch
libqpid-dispatch-0.4-11.el7.x86_64
pulp-client-1.0-1.noarch
pulp-docker-plugins-2.0.0.2-1.el7sat.noarch
pulp-katello-1.0-3.el7sat.noarch
pulp-puppet-plugins-2.8.1-2.el7sat.noarch
pulp-puppet-tools-2.8.1-2.el7sat.noarch
pulp-rpm-plugins-2.8.1.3-1.el7sat.noarch
pulp-selinux-2.8.1.3-1.el7sat.noarch
pulp-server-2.8.1.3-1.el7sat.noarch
python-gofer-qpid-2.7.6-1.el7sat.noarch
python-pulp-common-2.8.1.3-1.el7sat.noarch
python-pulp-docker-common-2.0.0.2-1.el7sat.noarch
python-pulp-oid_validation-2.8.1.3-1.el7sat.noarch
python-pulp-puppet-common-2.8.1-2.el7sat.noarch
python-pulp-repoauth-2.8.1.3-1.el7sat.noarch
python-pulp-rpm-common-2.8.1.3-1.el7sat.noarch
python-pulp-streamer-2.8.1.3-1.el7sat.noarch
python-qpid-0.30-9.el7sat.noarch
python-qpid-qmf-0.30-5.el7.x86_64
qpid-cpp-client-0.30-11.el7sat.x86_64
qpid-cpp-client-devel-0.30-11.el7sat.x86_64
qpid-cpp-server-0.30-11.el7sat.x86_64
qpid-cpp-server-linearstore-0.30-11.el7sat.x86_64
qpid-dispatch-router-0.4-11.el7.x86_64
qpid-java-client-0.30-3.el7.noarch
qpid-java-common-0.30-3.el7.noarch
qpid-proton-c-0.9-13.el7.x86_64
qpid-qmf-0.30-5.el7.x86_64
qpid-tools-0.30-4.el7.noarch
rubygem-smart_proxy_pulp-1.2.0-1.el7sat.noarch
sat62.example.com-qpid-broker-1.0-1.noarch
sat62.example.com-qpid-client-cert-1.0-1.noarch
sat62.example.com-qpid-router-client-1.0-1.noarch
sat62.example.com-qpid-router-server-1.0-1.noarch
tfm-rubygem-hammer_cli_katello-0.0.22.6-1.el7sat.noarch
tfm-rubygem-katello-3.0.0.21-1.el7sat.noarch
tfm-rubygem-qpid_messaging-0.30.0-7.el7sat.x86_64
Comment 1 Tom McKay 2016-04-22 16:38:15 UTC 
Note: Second time run it ran successfully.

$ sudo yum whatprovides vim
Loaded plugins: product-id, search-disabled-repos, subscription-manager
2:vim-enhanced-7.4.160-1.el7.x86_64 : A version of the VIM editor which includes recent enhancements
Repo        : rhel-7-server-rpms
Matched from:
Provides    : vim = 7.4.160-1.el7



2:vim-enhanced-7.4.160-1.el7.x86_64 : A version of the VIM editor which includes recent enhancements
Repo        : @anaconda/7.2
Matched from:
Provides    : vim = 7.4.160-1.el7



$ sudo yum whatprovides sshfs
Loaded plugins: product-id, search-disabled-repos, subscription-manager
rhel-7-server-rpms/7Server/x86_64/filelists                                        |  13 MB  00:00:00     
No matches found
Comment 3 Brad Buckingham 2016-06-01 17:50:40 UTC 
Michael, can you have someone investigate this and clone to redmine?  Thanks!
Comment 4 Michael Hrivnak 2016-06-08 20:02:13 UTC 
Maybe related, if tangentially: https://access.redhat.com/solutions/1584403

The error appears to be yum failing to read a key of an entitlement cert. That cert gets put into place by subscription-manager. So at least based on the information here, this doesn't look like a pulp bug.
Comment 5 Michael Hrivnak 2017-01-03 16:49:43 UTC 
I'm changing the component since I don't think this is a Pulp bug.