Bug 500215 - sat proxy 5.3 installer fails, missing rhn-ca-openssl.cnf
Summary: sat proxy 5.3 installer fails, missing rhn-ca-openssl.cnf
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite Proxy 5
Classification: Red Hat
Component: Installer
Version: 530
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Miroslav Suchý
QA Contact: Jeff Browning
URL: na
Whiteboard:
Depends On:
Blocks: 456999 486216
TreeView+ depends on / blocked
 
Reported: 2009-05-11 17:26 UTC by wes hayutin
Modified: 2009-09-10 14:38 UTC (History)
2 users (show)

Fixed In Version: sat530
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-09-10 14:38:52 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description wes hayutin 2009-05-11 17:26:10 UTC
Description of problem:

5/7.1 build

proxy cmd line:

install asks user to:
Use SSL [1]: 1
CA Chain [/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT]: /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
Please do copy your CA key and public certificate from grandprix.rhndev.redhat.com to 
/root/ssl-build directory. You may want to execute this command:
 scp 'root.redhat.com:/root/ssl-build/RHN-ORG-{PRIVATE-SSL-KEY,TRUSTED-SSL-CERT}' /root/ssl-build

fine, did that


Installed: spacewalk-proxy-management.noarch 0:0.5.7-5.el5sat
Dependency Installed: apr.i386 0:1.2.7-11 apr-util.i386 0:1.2.7-7.el5 distcache.i386 0:1.4.5-14.1 elfutils.i386 0:0.137-3.el5 elfutils-libs.i386 0:0.137-3.el5 httpd.i386 0:2.2.3-22.el5 jabberd.i386 0:2.0s10-3.49.el5sat mod_python.i386 0:3.2.8-3.1 mod_ssl.i386 1:2.2.3-22.el5 perl-URI.noarch 0:1.35-3 postgresql-libs.i386 0:8.1.11-1.el5_1.1 rhn-proxy-branding.noarch 0:5.3.0.20-1.el5sat rpm-build.i386 0:4.4.2.3-9.el5 spacewalk-backend.noarch 0:0.5.28-13.el5sat spacewalk-certs-tools.noarch 0:0.5.5-5.el5sat spacewalk-proxy-broker.noarch 0:0.5.7-5.el5sat spacewalk-proxy-common.noarch 0:0.5.7-5.el5sat spacewalk-proxy-docs.noarch 0:0.4.1-1.el5 spacewalk-proxy-package-manager.noarch 0:0.5.7-5.el5sat spacewalk-proxy-redirect.noarch 0:0.5.7-5.el5sat spacewalk-proxy-selinux.noarch 0:0.5.2-1.el5sat spacewalk-ssl-cert-check.noarch 0:1.7-1.el5sat squid.i386 7:2.6.STABLE21-3.el5
Complete!
You do not have monitoring installed. Do you want to install it?
Will run 'yum install spacewalk-proxy-monitoring'. [N]: N
Using CA key at /root/ssl-build/RHN-ORG-PRIVATE-SSL-KEY.
grep: /root/ssl-build/latest.txt: No such file or directory
Generating distributable RPM for CA public certificate:
Copying CA public certificate to /var/www/html/pub for distribution to clients:
Generating SSL key and public certificate:
CA password: 

ERROR: can't find a file that should have been created during an earlier step:
       /root/ssl-build/rhn-ca-openssl.cnf

       rhn-ssl-tool --help
SSL key generation failed! Installation interrupted.
API version: 5.3.0


looks like we need a few more files than the installer prompts you for.

Comment 1 Miroslav Suchý 2009-05-12 12:40:23 UTC
Commited as 4298302b5e2ba508c9c51648545af5ecb563bcbe and 5d44d7115a7a58bbdf41d97f506de624b4e0a1b1
Will be fixed in spacewalk-proxy-installer-0.5.25-5-sat

Comment 2 wes hayutin 2009-05-28 16:34:36 UTC
verified.. 5/21.1 biuld

Comment 3 Jan Pazdziora 2009-09-09 06:41:17 UTC
Stage validated with Satellite 5.3.0 Gold and RHN Proxy Gold, installing the Proxy both on RHEL 4 and RHEL 5. Moving to RELEASE_PENDING.

Comment 4 Brandon Perkins 2009-09-10 14:38:52 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHEA-2009-1433.html


Note You need to log in before you can comment on or make changes to this bug.