Description of problem: Current implementation of 'rhui-manager cert upload' and corresponding interactive command of rhui-manager (home -> [n] -> [u] ...) look broken due to incompatibilities in rebased version of pulp RHUI v3 using and cannot update all of necessary certs correctly. It's my understanding that these commands only update the cert in /etc/pki/rhui/redhat/ and does not update client cert and key of each Red Hat RPM repos saved in /var/lib/rhui/remote_share/<repo_id>_yum_importer/pki/. As a result, each repos' importer will fail to sync contents from the Red Hat CDN after updating the (content) cert. Version-Release number of selected component (if applicable): rh-rhui-tools-libs-3.0.1-3.el7ui How reproducible: Always, I think. Steps to Reproduce: 1. Update the RHUI entitlement (content) cert with using 'rhui-manager cert upload' command or its interactive shell command 2. Check the timestamp of /etc/pki/rhui/redhat/*.pem and /var/lib/rhui/remote_share/<repo_id>_yum_importer/pki/client{.cert,key}, and/or try to sync some of repos. Actual results: Client certs of each repo importers are not updated and it fails to sync repos. Expected results: Client certs of each repo importers are updated along with the master cert in /etc/pki/rhui/redhat/, and it succeeds to sync repos. Additional info: I'll attach a couple of experimental patches taking a little bit different approaches should resolve this issue.
*** Bug 1563045 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1569