Bug 2167470 - Default value of "SSL CA file" parameter missing in Administer -> Settings -> Authentication -> "Server CA file" location on Satellite Server Web UI.
Summary: Default value of "SSL CA file" parameter missing in Administer -> Settings ->...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Registration
Version: 6.13.0
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Sam Bible
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-02-06 17:38 UTC by Anand Jambhulkar
Modified: 2023-08-03 17:35 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-02-21 09:42:54 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Anand Jambhulkar 2023-02-06 17:38:25 UTC
Description of problem:
----------------------

The default value of "SSL CA file" parameter in the Administer -> Settings -> Authentication -> "Server CA file" location on Satellite Server Web UI is missing due to which, the location from where the CA file should be copied and transferred over to the client machine for the first time registration of the client to the Satellite Server without using the "--insecure" option is unknown.



Version-Release number of selected component (if applicable):
------------------------------------------------------------

Satellite 6.13



How reproducible:
----------------

Always



Steps to Reproduce:
------------------

1. Install Red Hat Satellite 6.13.

2. Go to Satellite Web UI -> Administer -> Settings -> Authentication 

3. Check the "Server CA file" parameter.



Actual results:
--------------

The default value of "Server CA file" parameter is missing in the "Satellite Web UI -> Administer -> Settings -> Authentication" setting.



Expected results:
----------------

The default value of "Server CA file" parameter should be provided so that the CA file can be manually copied from the specified location over to the Content Host so that, the first time registration of the client using Global Registration Template can go through without using the "--insecure" option.

Comment 1 Leos Stejskal 2023-02-14 09:16:14 UTC
Hi,
I can't reproduce the issue, value of "Server CA file" is set during installation.
How did you create the instance?

Comment 2 Leos Stejskal 2023-02-21 09:42:54 UTC
Hi,
I take my previous comment  back, field "Server CA file" is NOT set during installation, verified on 6.11, 6.12 & 6.13.

However this doesn't have any effect on registration, if you want to register hosts without using --insecure,
you have to download & install CA certificate on the machines before the registration begins.
The path to CA is defined in the "SSL certificate" setting.

I'm closing BZ as not a bug.


Note You need to log in before you can comment on or make changes to this bug.