Bug 1518848 – tomcat doesn't update certificate after katello-change-hostname

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1518848 - tomcat doesn't update certificate after katello-change-hostname

Summary:	tomcat doesn't update certificate after katello-change-hostname

Status:	NEW

Aliases:	None

Product:	Red Hat Satellite 6
Classification:	Red Hat
Component:	Backup & Restore (Show other bugs)
Sub Component:
Version:	6.3.0
Hardware:	Unspecified Unspecified

Priority	high Severity high (vote)
Target Milestone:	6.2.16
Target Release:	Unused
Assigned To:	John Mitsch
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:	PrioBumpGSS, Triaged

Depends On:
Blocks:	GSS_Sat6Beta_Tracker/GSS_Sat6_Tracker 1533259
	Show dependency tree / graph

Reported:	2017-11-29 11:14 EST by Tomer Brisker
Modified:	2018-10-26 01:30 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	Known Issue
Doc Text:	The command katello-change-hostname creates an error condition when run on Satellite 6.2 during migration and upgrade. This occurs because of a bug in the version of the katello-change-hostname command in the 6.2 release. To avoid this problem, complete the upgrade to Satellite 6.3 before running the katello-change-hostname command.
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Tomer Brisker 2017-11-29 11:14:10 EST

Description of problem:
Tomcat doesn't change the change the server certificate to the new hostname after katello-change-hostname is run on a cloned 6.2 Satellite, leading to failure during 6.3 upgrade proccess. 

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Clone a 6.2 Satellite
2. run `katello-change-hostname new.example.com`
3. try to upgrade satellite to 6.3 using foreman-maintain.

Actual results:
Upgrade fails in stage `foreman-rake katello:clean_backend_objects` because katello refuses to connect to candlepin due to the fact candlepin provides an invalid server certificate. 


Expected results:
Upgrade successful.

Additional info:
If upgrade failed, remove /etc/tomcat/keystore and /etc/pki/katello/keystore and rerun satellite-installer with no arguments to regenerate the correct keystores before rerunning the upgrade process.
This may have to do with the fact that katello-change-hostname was run with satellite 6.2 so that its code and puppet-cert code is an older version than that shipped in 6.3.

Comment 1 Mike McCune 2017-11-30 12:45:20 EST

This needs to go into 6.2.z as the katello-change-hostname is taking place on the prior version. 

It works fine in 6.3.

Comment 3 Mike McCune 2017-11-30 12:47:17 EST

*** WORKAROUND ***

1) remove /etc/tomcat/keystore and /etc/pki/katello/keystore 

2) rerun satellite-installer with no arguments

Note You need to log in before you can comment on or make changes to this bug.