Bug 1600868 - spacewalk-public.cert expired
Summary: spacewalk-public.cert expired
Alias: None
Product: Spacewalk
Classification: Community
Component: Server
Version: 2.6
Hardware: x86_64
OS: Linux
Target Milestone: ---
Assignee: Michael Mráka
QA Contact: Red Hat Satellite QA List
Depends On:
TreeView+ depends on / blocked
Reported: 2018-07-13 08:40 UTC by Matthew Hope
Modified: 2019-10-21 13:24 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Last Closed: 2019-10-21 13:24:29 UTC

Attachments (Terms of Use)

Description Matthew Hope 2018-07-13 08:40:35 UTC
Description of problem:

spacewalk-public.cert has expired today, I have an error:
 "Your satellite certificate has expired. Please visit the following link for steps on how to request or generate a new certificate: https://access.redhat.com/knowledge/tools/satcert Your satellite enters restricted period in 7 day(s)."

Version-Release number of selected component (if applicable): 2.3

How reproducible:

Install spacewalk 2.3, certificate has expired

Steps to Reproduce:

Actual results:

Expected results:

Additional info:

Comment 1 Tomáš Kašpárek 2018-07-13 13:01:45 UTC
Hello Matthew,

could you try https://github.com/spacewalkproject/spacewalk/wiki/CertCreation as workaround till we provide updated certificate?

Comment 2 Matthew Hope 2018-07-13 13:32:08 UTC
Hi Tomáš,

I have followed that guide and created my own GPG key and signed a modified spacewalk-public.cert (dated until 2020), I'll import your official cert once its updated.

One thing that is worth mentioning, the signing script (gen-oss-sat-cert.pl) cannot be found if you follow the link in that documentation, https://github.com/spacewalkproject/spacewalk/blob/master/scripts/gen-oss-sat-cert.pl ends up in a 404.

Instead I downloaded the script from the 2.3 branch:


Comment 3 Tomáš Kašpárek 2018-07-13 13:41:20 UTC
Thank you for noticing that gen-oss-sat-cert.pl can not be found, it's because there are no more entitlements in later versions of Spacewalk (so one way to get rid of entitlement issues would be just to upgrade).

Anyways I've updated the wiki to use https://github.com/spacewalkproject/spacewalk/blob/SPACEWALK-2.3/scripts/gen-oss-sat-cert.pl

Comment 4 Matthew Hope 2018-07-13 13:45:22 UTC
Hi Tomáš,

Great stuff thanks, we will be looking to upgrade before the end of the year.


Comment 5 Tom Wilson 2018-07-13 16:27:56 UTC
Hi Tomáš,

Do you know when the new official certificate will be available?

Comment 6 sathvir.singh 2018-07-16 11:51:36 UTC
Hi All,

Has there been any update on this (availability of the new official certificate)?


Comment 7 Tomáš Kašpárek 2018-07-16 11:57:20 UTC

the best solution for you would be to upgrade to Spacewalk 2.5 (or higher) as these versions are not using entitlement certificate anymore.

If for some reason you want to stay at Spacewalk 2.4 (or lower), I've created new entitlement certificate. However I did use different GPG key for signing it so you will need to import it.
Instructions how to import my GPG key, and re-activate Spacewalk can be found here: https://github.com/spacewalkproject/spacewalk/wiki/Refreshing-certificate

Best regards,

Comment 8 sathvir.singh 2018-07-16 12:06:37 UTC
Many thanks Tomáš,

Worked a treat!

Comment 9 redhat 2018-07-20 20:05:20 UTC
I'd like to point out that if any of the modules used by https://raw.githubusercontent.com/spacewalkproject/spacewalk/SPACEWALK-2.3/scripts/gen-oss-sat-cert.pl aren't installed, [ie Date::Parse in my case] the script won't work. And of course Spacewalk won't let me install it because of the cert issue at hand. 

I can work around it [temporarily install from public repo] but wanted ya'll to be aware.

Comment 10 redhat 2018-07-20 20:37:24 UTC
There appears to be a simpler workaround available here:

Comment 11 Vijay 2018-07-30 11:04:46 UTC
Hi Tomas,
Below link is not working for me as I have spacewalk 2.1.


Can you please suggest or I have to upgrade to 2.5?


Comment 12 Michael Mráka 2019-10-21 13:24:29 UTC
Spacewalk 2.8 (and older) has already reached it's End Of Life.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before end of life. If you would still like
to see this bug fixed and are able to reproduce it against current version
of Spacewalk 2.9, you are encouraged change the 'version' and re-open it.

Note You need to log in before you can comment on or make changes to this bug.