I'm guessing this is more temporary code that was left in the initial implementation of the admin certificates. The expiration time of the certs is 3650 days. In cert_generator.py: cmd = 'openssl x509 -req -sha1 -CA %s -CAkey %s -set_serial %s -days 3650' <jortel> I'd vote for say .. 7 days. it's not meant to be a perm login, right? <jortel> more like a session? <jdob> exactly
Fixed in CR 14
Verified with pulp build 0.208. The expiration time of certs is 7 days now. pulp-admin -u admin -p admin auth login --username admin --password admin User credentials successfully stored at [/root/.pulp/user-cert.pem] [root@dhcp201-175 .pulp]# openssl x509 -in user-cert.pem -noout -text <snippet> Data: Version: 1 (0x0) Serial Number: 9 (0x9) Signature Algorithm: sha1WithRSAEncryption Issuer: CN=RHUI User PKI Validity Not Before: Jul 19 09:38:22 2011 GMT Not After : Jul 26 09:38:22 2011 GMT Subject: CN=admin:admin:b244007c-1a1d-46ac-956b-6a6cfcb2dd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) </snippet>
As per the comment 2, the expiration time of certs is 7 days now. And even after expiartion of these certs, pulp-admin is rejecting them. [root@dhcp201-175 .pulp]# pulp-admin cds list error: operation failed: sslv3 alert certificate expired So moving this to verified.
Closing with Community Release 15 pulp-0.0.223-4.