Red Hat Bugzilla – Bug 51889
rhn_register doesnt work in gui or tui
Last modified: 2015-01-07 18:50:46 EST
Description of Problem: rhn_register doesn't ever retrieve the welcome message, and refuses to run Version-Release number of selected component (if applicable): rhn_register-1.4.0-16 How Reproducible: always Steps to Reproduce: 1. run rhn_register on the ia64 machine Actual Results: on console: A socket error occured: SSL_connect error, attempt #1 A socket error occured: SSL_connect error, attempt #2 A socket error occured: SSL_connect error, attempt #3 A socket error occured: SSL_connect error, attempt #4 A socket error occured: SSL_connect error, attempt #5 Fatal Error: SSL_connect error in X, the same messages dump to the terminal, as well as popping up a window that says: Error Fatal error retrieving welcome message: SSL_connect error Expected Results: system gets registered. Additional Information: openssl-0.9.6b-3 ssh functionality works, confirming the ability to open ssl sockets. netscape can open https://beta.rhns.redhat.com without difficulty.
First guess is it's a ssl bug, since it's throwing ssl errors. Can you change serverURL in the config to point to http:// instead of https:// and try? ssh working doesnt really mean much (ssh != ssl) netscape being able to open https is a better sign, but I think netscape includes it's own ssl implementation, so probabaly isnt using openssl. I'll add nalin to the cc, and see what he thinks.
nalin, seen any ia64 related openssl bugs?
We (Red Hat) really need to fix this before next release.
when i change from https to http, it works. however, this isnt a valid workaround for the customer because it compromises RHN userinfo security.
well, the http suggestion was for troubleshooting, not a recommended setting. This is a beta afterall. Nalin, any clue? ssl on is64 seems to work okay on 7.1
We're running the test suite in the %build phase, like we always do.
Please check if you can connect to the RHNS server using openssl's s_client command: openssl s_client -connect www.rhns.redhat.com:https (send "QUIT" to disconnect)
rhn_register works for me with a current install.
rhn_register does not work with latest build: rhn_register-1.4.0-20 from re0831.0, however, the openssl s_client test string seems to work properly. rhn_register reports the same ssl error messages as before.
Created attachment 30854 [details] openssl s_client -connect beta.rhns.redhat.com:https
Created attachment 30855 [details] openssl s_client -connect www.rhns.redhat.com:https
resolving bug. old and crufty.