Hide Forgot
TRUE or FALSE, product certs are found in the etc products directory? Currently entitlement certs are dropped into a "product" subdirectory of /etc/pki/entitlement during a subscribe binding. Product certs are statically located in the /etc/pki/products directory. Should dev change this behaviour and drop the entitlement certs directly into /etc/pki/entitlement? I spoke to Prad about the use of the /etc/pki/entitlements/"products" directory. He said they initially thought they would separate the certs for the layered products. Currently the layered certs are just part of the parent entitlement cert. Therefore the "product" subdirectory could be removed if we want to reduce the confusion. Its only purpose currently is to add to the overuse of the term "product". If it was removed now (which is probably a simple dev change), it impacts docs and tests. If we want to make this change, I vote to do it earlier (pre-BETA) (possibly ALPHA) rather than later. Leaving the subdirectory "product" under /etc/pki/entitlement confuses the all of us.
Checked into master (not ALPHA) in 0b54685edd3c33005653a954ef5052b8083a6bea.
Deon, The consequence of the fix for this bug means that a global search and replace must be done on all documentation (post alpha) switching all occurrences of "/etc/pki/entitlement/product" with "/etc/pki/entitlement".
[root@jsefler-onprem01 ~]# rpm -q subscription-manager subscription-manager-0.93.1-1.git.82.283c328.fc12.i386 [root@jsefler-onprem01 ~]# grep entitlementCertDir /etc/rhsm/rhsm.conf entitlementCertDir=/etc/pki/entitlement [root@jsefler-onprem01 ~]# grep productCertDir /etc/rhsm/rhsm.conf productCertDir=/etc/pki/product [root@jsefler-onprem01 ~]# subscription-manager register --username=testuser1 --password=password d735f1dc-ce1b-441f-847f-40287b5c36f8 testuser1 [root@jsefler-onprem01 ~]# subscription-manager list --available | grep PoolId <...snip...> PoolId: ff8080812c62b966012c62ba4f0701c4 PoolId: ff8080812c62b966012c62ba4f6501df [root@jsefler-onprem01 ~]# subscription-manager subscribe --pool=ff8080812c62b966012c62ba4f6501df [root@jsefler-onprem01 ~]# ls /etc/pki/entitlement/ 1129020453785279.pem key.pem VERIFIED the code! No more sub directory called product TODO: Should also verify the doc...
This bugzilla is VERIFIED. I opened a separate bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=661103 for the changes required to the documentation.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2011-0611.html