Bug 1908841 - Capsule certs regeneration fails with an error if the organization has a `'` in the name
Summary: Capsule certs regeneration fails with an error if the organization has a `'` ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Installation
Version: 6.7.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: 6.12.0
Assignee: Eric Helms
QA Contact: Gaurav Talreja
URL:
Whiteboard:
Depends On:
Blocks: 1399395 1541321
TreeView+ depends on / blocked
 
Reported: 2020-12-17 17:45 UTC by Andrea Perotti
Modified: 2023-04-21 13:19 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-11-16 13:32:23 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 34906 0 Normal New b"Capsule certs regeneration fails with an error if the organization has a `'` in the name" 2022-05-12 01:55:18 UTC
Red Hat Issue Tracker SAT-12370 0 None None None 2022-08-22 15:02:36 UTC
Red Hat Knowledge Base (Solution) 5908551 0 None None None 2021-03-26 12:00:00 UTC
Red Hat Product Errata RHSA-2022:8506 0 None None None 2022-11-16 13:32:36 UTC

Description Andrea Perotti 2020-12-17 17:45:11 UTC
Description of problem:

When regenerating the capsule certs in an organization with a `'` in the name, the regeneration process end with an error:

# capsule-certs-generate --foreman-proxy-fqdn "$CAPSULE" \
>                                    --certs-tar  "~/$CAPSULE-certs.tar" \
>                                    --server-cert "/root/certs/capsule.example.local.crt" \
>                                    --server-key "/root/certs/capsule.example.local.key" \
>                                    --server-ca-cert "/root/certs/ca.example.local.cer" \
>                                    --certs-update-server
[...]
Installing             Done                                               [100%] [..........................................................................................................................................................]
/usr/share/ruby/erb.rb:849:in `eval': (erb):8: syntax error, unexpected tCONSTANT, expecting ')' (SyntaxError)
...concat(( color('Ex'Ample_-_local', :info) ).to_s);...

ID | TITLE                      | NAME                       | DESCRIPTION | LABEL
---|----------------------------|----------------------------|-------------|---------------------------
1  | Ex'Ample - local           | Ex'Ample - local           |             | ExAmple_local



Version-Release number of selected component (if applicable):

satellite-installer-6.7.0.8-1.el7sat.noarch                 Wed Oct  7 11:34:18 2020


How reproducible:
Always

Steps to Reproduce:
1. Have an Organization with a `'` in the name
2. try to regenerate certificates for capsules via "capsule-certs-generate"

Actual results:
Certs are regenerated, but ruby trigger an error while trying to print final message,
so user is lead to think that the procedure failed.

Expected results:

End of procedure message to be shown in the output


Additional info:
As temporary workaround has been chanced in:
/etc/foreman-installer/scenarios.d/satellite-answers.yaml
the organization name to drop the `'` element.

Comment 3 Eric Helms 2022-05-12 01:55:17 UTC
Created redmine issue https://projects.theforeman.org/issues/34906 from this bug

Comment 4 Bryan Kearney 2022-07-06 20:03:03 UTC
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/34906 has been resolved.

Comment 9 errata-xmlrpc 2022-11-16 13:32:23 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Satellite 6.12 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:8506


Note You need to log in before you can comment on or make changes to this bug.