Bug 1982670 - Entitlement certificate related errors logged in /var/log/rhsm/rhsm.log when simple content access enabled.
Summary: Entitlement certificate related errors logged in /var/log/rhsm/rhsm.log when ...
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: subscription-manager
Version: 8.4
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: beta
: 8.9
Assignee: Pino Toscano
QA Contact: Red Hat subscription-manager QE Team
URL:
Whiteboard:
: 2211676 (view as bug list)
Depends On: 2178610
Blocks: 2221709
TreeView+ depends on / blocked
 
Reported: 2021-07-15 11:55 UTC by mithun kalyat
Modified: 2023-07-10 15:49 UTC (History)
12 users (show)

Fixed In Version: subscription-manager-1.28.37-1.el8
Doc Type: No Doc Update
Doc Text:
Clone Of:
: 2178610 2221709 (view as bug list)
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github candlepin subscription-manager pull 3227 0 None Merged [1.28] 1982670: do not collect unentitled products in SCA mode 2023-03-24 08:01:50 UTC
Github candlepin subscription-manager pull 3234 0 None Merged [1.28] test: add simple test for 1982670 2023-04-12 10:49:45 UTC
Red Hat Knowledge Base (Solution) 7016350 0 None None None 2023-06-01 14:06:30 UTC

Description mithun kalyat 2021-07-15 11:55:20 UTC
Description of problem:

System is registered to Satellite successfully using SCA but some entitlement certificate related messages/errors are keep getting generated in /var/log/rhsm/rhsm.log. 

Steps to Reproduce:

[root@rhel8client ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 8.3 (Ootpa)

[root@rhel8client ~]# rpm -qa | grep subscription-manager
subscription-manager-1.28.13-3.el8_4.x86_64
subscription-manager-rhsm-certificates-1.28.13-3.el8_4.x86_64
dnf-plugin-subscription-manager-1.28.13-3.el8_4.x86_64
subscription-manager-cockpit-1.28.13-3.el8_4.noarch
python3-subscription-manager-rhsm-1.28.13-3.el8_4.x86_64

[root@rhel8client ~]# syspurpose show
{}

[root@rhel8client ~]# syspurpose set-role "Red Hat Enterprise Linux Workstation"
role set to "Red Hat Enterprise Linux Workstation".
[root@rhel8client ~]# syspurpose show
{
  "role": "Red Hat Enterprise Linux Workstation"
}

[root@rhel8client ~]# subscription-manager status
+-------------------------------------------+
   System Status Details
+-------------------------------------------+
Overall Status: Disabled
Content Access Mode is set to Simple Content Access. This host has access to content, regardless of subscription status.

System Purpose Status: Disabled

[root@rhel8client ~]# ls /etc/pki/product-default/
479.pem

[root@rhel8client ~]# yum update -y

[root@rhel8client ~]# cat /etc/redhat-release 
Red Hat Enterprise Linux release 8.4 (Ootpa)

[root@rhel8client ~]# syspurpose show
{
  "role": "Red Hat Enterprise Linux Workstation"

[root@rhel8client ~]# ls /etc/pki/product
product/         product-default/ 

[root@rhel8client ~]# ls /etc/pki/product-default/
479.pem

/var/log/rhsm/rhsm.log

Total updates: 1
Found (local) serial# []
Expected (UEP) serial# [5615889862954254283]
Added (new)
  [sn:5615889862954254283 ( Content Access,) @ /etc/pki/entitlement/5615889862954254283.pem]
Deleted (rogue):
  <NONE>
2021-07-11 09:26:31,973 [WARNING] subscription-manager:5798:MainThread @cert_sorter.py:194 - Installed product 479 not present in response from server.
2021-07-11 09:26:50,363 [INFO] yum:5803:MainThread @entcertlib.py:131 - certs updated:
Total updates: 1
Found (local) serial# []
Expected (UEP) serial# [5615889862954254283]
Added (new)
  [sn:5615889862954254283 ( Content Access,) @ /etc/pki/entitlement/5615889862954254283.pem]
Deleted (rogue):

Actual results:

Above error generated in /var/log/rhsm/rhsm.log

Expected results:

Need to avoid unwanted messages from the logs.

Comment 7 Jan Stavel 2023-03-27 20:43:45 UTC
The warning appeared in the system.



no warning about certificate appeared after I've updated the packages:

   subscription-manager-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
    subscription-manager-cockpit-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.noarch
    subscription-manager-rhsm-certificates-1.28.32-1.el8.x86_64
    dnf-plugin-subscription-manager-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
    python3-cloud-what-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
    python3-subscription-manager-rhsm-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
    python3-syspurpose-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.x86_64
    rhsm-icons-1.28.36+19.gf3b05a8a9-1.git.0.22f5e3e.noarch

Comment 10 Zdenek Petracek 2023-05-11 16:15:39 UTC
Final verification with help of ansible playbook was done on a SUBMAN version:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] => 
  msg: |-
    server type: Red Hat Subscription Management
    subscription management server: 4.2.15-1
    subscription management rules: 5.43
    subscription-manager: 1.28.37-1.el8

Registering the system with account with SCA enabled:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] => 
  msg: |-
    Registering to: subscription.rhsm.stage.redhat.com:443/subscription
    The system has been registered with ID: 07c8afc8-e782-4cfb-bb92-3623add54a18
    The registered system name is: kvm-02-guest17.rhts.eng.brq.redhat.com
    Ignoring the request to auto-attach. Attaching subscriptions is disabled for organization "16770451" because Simple Content Access (SCA) is enabled.

List of installed products:
ok: [kvm-02-guest17.rhts.eng.brq.redhat.com] => 
  msg: |-
    +-------------------------------------------+
        Installed Product Status
    +-------------------------------------------+
    Product Name:   Red Hat CloudForms
    Product ID:     167
    Version:        4.7
    Arch:           x86_64
    Status:         Unknown
    Status Details:
    Starts:
    Ends:
  
    Product Name:   Red Hat Enterprise Linux for x86_64 Beta
    Product ID:     486
    Version:        8.9 Beta
    Arch:           x86_64
    Status:         Unknown
    Status Details:
    Starts:
    Ends:

After updating the certificates, no warning or error message was found in /var/log/rhsm/rhsm.log:
...
2023-05-11 18:03:55,899 [DEBUG] subscription-manager:17241:MainThread @connection.py:779 - Making request: GET /subscription/consumers/07c8afc8-e782-4cfb-bb92-3623add54a18/certificates?serials=951381933255591752
2023-05-11 18:03:56,802 [DEBUG] subscription-manager:17241:MainThread @connection.py:884 - Response time: 0.6355688571929932, Smoothed response time: 0.4077358908653259
2023-05-11 18:03:56,902 [DEBUG] subscription-manager:17241:MainThread @connection.py:861 - Response: status=200, requestUuid=f10b0b7f-3e34-477f-a3e1-9e3d1fdf2a05, request="GET /subscription/consumers/07c8afc8-e782-4cfb-bb92-3623add54a18/certificates?serials=951381933255591752"
2023-05-11 18:03:56,904 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:400 - Ent cert bundle pre_install
2023-05-11 18:03:56,949 [DEBUG] subscription-manager:17241:MainThread @certdirectory.py:386 - Writing key file: '/etc/pki/entitlement/951381933255591752-key.pem'
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @certdirectory.py:391 - Writing certificate file: '/etc/pki/entitlement/951381933255591752.pem'
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:422 - ent cert bundle post_install
2023-05-11 18:03:56,950 [DEBUG] subscription-manager:17241:MainThread @entcertlib.py:351 - cert bundles post_install: <rhsm.certificate2.EntitlementCertificate object at 0x7fae597fba58>
2023-05-11 18:03:56,950 [INFO] subscription-manager:17241:MainThread @entcertlib.py:132 - certs updated:
Total updates: 1
...

Comment 13 Pino Toscano 2023-06-01 14:06:30 UTC
*** Bug 2211676 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.