Bug 1955955 - satellite installer does not generate the katello-ca-consumer rpm for version > 1.0-9
Summary: satellite installer does not generate the katello-ca-consumer rpm for version...
Keywords:
Status: ASSIGNED
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Installer
Version: 6.9.0
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: Unspecified
Assignee: Eric Helms
QA Contact: Devendra Singh
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-05-01 17:41 UTC by Dhananjay Pramod Mule
Modified: 2021-05-05 16:43 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 32529 0 Normal New The installer does not update the katello-ca-consumer-latest symlink to the latest RPM once the bootstrap RPM's release ... 2021-05-05 16:43:17 UTC

Description Dhananjay Pramod Mule 2021-05-01 17:41:00 UTC
Description of problem:
Having satellite with katello-ca-consumer-${FQDN}-1.0-9.[noarch|src].rpm and forcing the satellite-installer to update the certificate does not generated the updated version for katello-ca-consumer rpm package, (it seems the package is updated but the version is stuck on 1.0-9)

Version-Release number of selected component (if applicable): 6.9.1


How reproducible:
every-time 

Steps to Reproduce:
1 Install an older version of satellite server (6.8 should work)
2 Install a custom certificate, using satellite-installer
3 You should see katello-ca-consumer-latest.noarch.rpm pointing to the latest one.
4 Repeat steps 2 approximately 10 times.
5 on satellite CLI # ls -la /var/www/html/pub
6 You should now see a large number (probably about 12) versions of the katello-ca-consumer RPM.
7 You should see katello-ca-consumer-latest.noarch.rpm pointing to the latest one.
8 Upgrade to satellite 6.9.1
9 on satellite CLI : # ls -la /var/www/html/pub
10 Apply new  certificate on the satellite 
12 On satellite CLI : # ls -la /var/www/html/pub


Actual results:
step               result
5                  satellite generates the 10 versions katello-ca-consumer RPM and katello-ca-consumer-latest.noarch.rpm points to version 10 of the rpm
~~~
lrwxrwxrwx. 1 root   root      90 May  1 16:15 katello-ca-consumer-latest.noarch.rpm -> /var/www/html/pub/katello-ca-consumer-dmule-rhsat.syslab.pnq2.redhat.com-1.0-12.noarch.rpm
~~~

9                 satellite links the katello-ca-consumer-latest.noarch.rpm to version 9 of the katello-ca-consumer RPM while higher versions are present 
~~~
lrwxrwxrwx. 1 root   root      89 May  1 17:58 katello-ca-consumer-latest.noarch.rpm -> /var/www/html/pub/katello-ca-consumer-dmule-rhsat.syslab.pnq2.redhat.com-1.0-9.noarch.rpm
-rw-r--r--. 1 root   root   10000 May  1 17:34 katello-ca-consumer-dmule-rhsat.syslab.pnq2.redhat.com-1.0-10.noarch.rpm
~~~

11                 same as step 9



Expected results:
For step 9  satellite installer script should be linked to the latest 'katello-ca-consumer-latest.noarch.rpm' 

for step 11 satellite installer script should create higher version of katello-ca-consumer RPM and link it with katello-ca-consumer-latest.noarch.rpm





Additional info:

After step 8, updated the katello-ca-consumer RPM on the registered client, and it was able to list the identity

$ subscription-manager identity
system identity: 99fddb6b-7a4d-4092-b0d0-9ce16ea7fb9f
name: host.dhananjay.com
org name: RedHat
org ID: RedHat
environment name: Library

After installing the new certificates on the satellite (step 10)
...
lrwxrwxrwx. 1 root   root      89 May  1 18:32 katello-ca-consumer-latest.noarch.rpm -> /var/www/html/pub/katello-ca-consumer-dmule-rhsat.syslab.pnq2.redhat.com-1.0-9.noarch.rpm
...

Host is not able to show the identity 
# subscription-manager identity
Unable to verify server's identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

I installed the new rpm (it is of the same version)
# curl --insecure --output katello-ca-consumer-latest.noarch.rpm https://dmule-rhsat.syslab.pnq2.redhat.com/pub/katello-ca-consumer-latest.noarch.rpm
...
# yum reinstall katello-ca-consumer-latest.noarch.rpm -y
....
 katello-ca-consumer-dmule-rhsat.syslab.pnq2.redhat.com           noarch          1.0-9       /katello-ca-consumer-latest.noarch                         14 k
....

Now host is able to show the identity
# subscription-manager identity
system identity: 99fddb6b-7a4d-4092-b0d0-9ce16ea7fb9f
name: host.dhananjay.com
org name: RedHat
org ID: RedHat
environment name: Library



This Indicates the satellite actually updates the version '1.0-9' every-time we apply custom certificate on the satellite

Comment 1 Eric Helms 2021-05-05 16:43:16 UTC
Created redmine issue https://projects.theforeman.org/issues/32529 from this bug


Note You need to log in before you can comment on or make changes to this bug.