Bug 2185634 - [RFE] Alternate method of katello-ca-cosumer to populate SSL certs on client systems
Summary: [RFE] Alternate method of katello-ca-cosumer to populate SSL certs on client ...
Keywords:
Status: NEW
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Registration
Version: 6.12.3
Hardware: All
OS: All
medium
medium
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-04-10 17:03 UTC by Sayan Das
Modified: 2023-06-26 16:09 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker SAT-18615 0 None None None 2023-06-26 16:09:04 UTC

Description Sayan Das 2023-04-10 17:03:39 UTC
1. Proposed title of this feature request

A similar option like curl command from Global Registration method, to update\refresh SSL certs on the client systems connected with satellite\capsule instead of using katello-ca-consumer rpm


2. What is the nature and description of the request?

Introduction of a snippet\template which can be used to generate a curl command and use the same to update\refresh SSL certs on the client systems


3. Why does the customer need this? (List the business requirements here)

This RFE is an extension of https://bugzilla.redhat.com/show_bug.cgi?id=2124052 basically. 

Since katello-ca-consumer rpm has been deprecated and no longer being used for registration purposes, If SSL CA changes in satellite, Then end-users have only one option left with them i.e. completely re-register the system.

But It should not be required. We should have a similar option present to generate a curl command, that will help deploying the new SSL CA on the client systems.


4. How would the customer like to achieve this? (List the functional requirements here)

In the same was as we generate and use the curl command for Global Registration method
 

5. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.

* Install satellite

* Register a client system

* Install custom SSL certs on satellite

* Use the new feature to update the CA on the client system 


6. Is there already an existing RFE upstream or in Red Hat Bugzilla?


No


7. Does the customer have any specific time-line dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?

Satellite 6.13 or as soon as it's feasible


8. Is the sales team involved in this request and do they have any additional input?

NA


9. List any affected packages or components.

foreman


10. Would the customer be able to assist in testing this functionality if implemented?

RH support can

Comment 1 Sayan Das 2023-06-26 16:07:35 UTC
Can we recommend this as an alternative to installing katello-ca-consumer, for every client system, after a SSL CA renewal ?

# _SERVER=$(subscription-manager config | awk '/ hostname/{print $NF}'| tr -d '[]')

# curl http://$_SERVER/pub/katello-rhsm-consumer | bash

# subscription-manager refresh



-- Sayan


Note You need to log in before you can comment on or make changes to this bug.