Bug 696403 - RHUI Manager: Red Hat Entitlement Certificates
Summary: RHUI Manager: Red Hat Entitlement Certificates
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Update Infrastructure for Cloud Providers
Classification: Red Hat
Component: Documentation
Version: 2.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Lana Brindley
QA Contact: wes hayutin
URL:
Whiteboard:
Depends On:
Blocks: 689309
TreeView+ depends on / blocked
 
Reported: 2011-04-14 01:13 UTC by Jay Dobies
Modified: 2016-02-18 05:34 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-29 04:42:13 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jay Dobies 2011-04-14 01:13:50 UTC
Accessed from the Home screen:

   n   manage Red Hat entitlement certificates

This screen revolves around the Red Hat issued content certificate.


------------------------------
List

The simplest feature is to have RHUI Manager look into the cert and display some relevant data. Data displayed:
- Not Before - start date after which the cert is valid
- Not After - expiration date after which the cert is no longer valid
- Serial Number - helps to further identify the certificate
- Entitlements - list of products granted entitlements to in the certificate

Sample:

rhui (entitlements) => l

Red Hat Content Certificate

  General
    Not Before:    2011-03-29 13:59:28+00:00
    Not After:     2011-06-25 13:59:28+00:00
    Serial Number: 90

  Entitlements
    Red Hat Enterprise Linux Server (RPMs)
    Red Hat Enterprise Linux Server (SRPMS)
    Red Hat Enterprise Linux Server (STS)
    Red Hat Enterprise Linux Server 6 Optional Releases (RPMs)
    Red Hat Enterprise Linux Server 6 Optional Releases (SRPMS)
    Red Hat Enterprise Linux Server 6 Optional Updates (RPMs)
    Red Hat Enterprise Linux Server 6 Optional Updates (SRPMS)
    Red Hat Enterprise Linux Server 6 Releases (RPMs)
    Red Hat Enterprise Linux Server 6 Releases (SRPMS)
    Red Hat Enterprise Linux Server 6 Updates (RPMs)
    Red Hat Enterprise Linux Server 6 Updates (SRPMS)
    Red Hat Update Infrastructure 1.2 (RPMs)
    Red Hat Update Infrastructure 1.2 (SRPMS)

------------------------------------------------------------------------------
rhui (entitlements) => 


-----------------------------------
Upload

Upload a new content certificate:

   u   upload a new Red Hat content certificate

If Red Hat issues a new content certificate, this is used to upload that new certificate into the RHUI. Red Hat would issue a new certificate typically for the following reasons:
- To extend the duration of a certificate that is set to expire soon.
- Grant/revoke entitlements from the certificate.

The certificate is stored on the same system RHUI Manager is installed on at /etc/pki/rhui. For security reasons, that directory is only writable by root by default. As such, RHUI Manager will tell the user if they don't have privileges to upload a new cert and not let them proceed:

------------------------------------------------------------------------------
rhui (entitlements) => u

The current user does not have write privileges to update the
content cert at /etc/pki/rhui/content-cert.crt.

------------------------------------------------------------------------------
rhui (entitlements) => 

The following takes place when uploading a new certificate:
- the certificate is stored on the RHUI Manager system
- all Red Hat imported repos are configured to use the new certificate when synccing from Red Hat
- we display the summary of the new certificate as verification (summary matches the output from list)


Sample:

rhui (entitlements) => u

Full path to the new content certificate:
/home/jdob/vault/code/entitlement-certs/big-content-cert.crt
Cannot find file, please enter a valid path

Full path to the new content certificate:
/home/jdob/vault/code/rhui-certs/content-cert.crt

Full path to the new content certificate private key:
/home/jdob/vault/code/rhui-certs/content-key.pem

The RHUI will be updated with the following certificate:
  Certificate: /home/jdob/vault/code/rhui-certs/content-cert.crt
  Key:         /home/jdob/vault/code/rhui-certs/content-key.pem

Proceed? (y/n) y

Backing up certificate to /etc/pki/rhui/bak-content-cert.crt...
Updating RHUI Tools...
... certificate successfully updated
Updating repository Red Hat Update Infrastructure 1.2 (RPMs) (5Server-x86_64)...
... successfully updated
Updating repository Red Hat Update Infrastructure 1.2 (RPMs) (5Server-i386)...
... successfully updated
Updating repository Red Hat Update Infrastructure 1.2 (SRPMS) (5Server-i386)...
... successfully updated
Updating repository Red Hat Update Infrastructure 1.2 (SRPMS) (5Server-x86_64)...
... successfully updated

Red Hat Content Certificate

  General
    Not Before:    2011-03-29 13:59:28+00:00
    Not After:     2011-06-25 13:59:28+00:00
    Serial Number: 90

  Entitlements
    Red Hat Enterprise Linux Server (RPMs)
    Red Hat Enterprise Linux Server (SRPMS)
    Red Hat Enterprise Linux Server (STS)
    Red Hat Enterprise Linux Server 6 Optional Releases (RPMs)
    Red Hat Enterprise Linux Server 6 Optional Releases (SRPMS)
    Red Hat Enterprise Linux Server 6 Optional Updates (RPMs)
    Red Hat Enterprise Linux Server 6 Optional Updates (SRPMS)
    Red Hat Enterprise Linux Server 6 Releases (RPMs)
    Red Hat Enterprise Linux Server 6 Releases (SRPMS)
    Red Hat Enterprise Linux Server 6 Updates (RPMs)
    Red Hat Enterprise Linux Server 6 Updates (SRPMS)
    Red Hat Update Infrastructure 1.2 (RPMs)
    Red Hat Update Infrastructure 1.2 (SRPMS)

------------------------------------------------------------------------------
rhui (entitlements) => 



----------------------------
Custom Repository Entitlements

I may have to rename this screen's title since this doesn't fall under Red Hat entitlements, but felt related enough to show in the same area. The idea is that it's a summary of all entitlements the user may have defined in their environment.

I'm not going to go into much more explanation here. That will be in the Custom Repositories section which will be its own bug.

In the below sample:
- there are two custom repos defined, Repo 1 and Repo 2
- both were defined with the /protected/$basearch/os entitlement

Sample:

rhui (entitlements) => c

Custom Repository Entitlements

  For each entitlement URL listed, the corresponding repositories
  that are configured with that entitlement are listed.

  /protected/$basearch/os
    - Name: Repo 1
      URL:  protected/i386/os
    - Name: Repo 2
      URL:  protected/x86_64/os


------------------------------------------------------------------------------
rhui (entitlements) => 




----------------------------
Menu:

------------------------------------------------------------------------------
             -= Red Hat Update Infrastructure Management Tool =-


-= Entitlements Manager =-

   l   list Red Hat content certificate entitlements
   c   list custom repository entitlements
   u   upload a new Red Hat content certificate

                                                           Connected: guardian
------------------------------------------------------------------------------
rhui (entitlements) =>

Comment 1 Lana Brindley 2011-04-14 03:25:48 UTC
Operation/Client Entitlements

LKB

Comment 2 Lana Brindley 2011-04-14 03:28:29 UTC
(In reply to comment #1)

That should be Operation/Red Hat Content Certificates

LKB

Comment 3 Lana Brindley 2011-05-05 04:49:49 UTC
Revision 1-6

LKB

Comment 4 Sachin Ghai 2011-05-24 13:12:36 UTC
Couldn't see any section/subsection for "list custom repository entitlements"

rhui (entitlements) => c

Custom Repository Entitlements

  For each entitlement URL listed, the corresponding repositories
  that are configured with that entitlement are listed.

  /protected/$basearch/os
    - Name: Repo 1
      URL:  protected/i386/os
    - Name: Repo 2
      URL:  protected/x86_64/os


------------------------------------------------------------------------------
rhui (entitlements) =>

Comment 5 Lana Brindley 2011-05-24 22:01:04 UTC
(In reply to comment #4)
> Couldn't see any section/subsection for "list custom repository entitlements"
> 
> rhui (entitlements) => c
> 
> Custom Repository Entitlements
> 
>   For each entitlement URL listed, the corresponding repositories
>   that are configured with that entitlement are listed.
> 
>   /protected/$basearch/os
>     - Name: Repo 1
>       URL:  protected/i386/os
>     - Name: Repo 2
>       URL:  protected/x86_64/os
> 
> 
> ------------------------------------------------------------------------------
> rhui (entitlements) =>


<procedure id="proc-Installation_Guide-Red_Hat_Entitlement_Certificates-List_Custom_Repository_Entitlements">
	<title>List Custom Repository Entitlements</title>
	 <indexterm>
		<primary>RHUI Manager</primary>
		 <secondary>list custom repository entitlements</secondary>
	</indexterm>
	 <step>
		<para>
			From the Entitlements Manager screen, type <userinput>c</userinput> at the prompt to list data about the custom repository entitlements.
		</para>
			
<screen>
rhui (entitlements) =&gt; c

Custom Repository Entitlements

  For each entitlement URL listed, the corresponding repositories
  that are configured with that entitlement are listed.

  /protected/$basearch/os
    - Name: Repo 1
      URL:  protected/i386/os
    - Name: Repo 2
      URL:  protected/x86_64/os

------------------------------------------------------------------------------
rhui (entitlements) =>
</screen>
	</step>
</procedure>

Revision 1-10

LKB
LKB

Comment 6 Sachin Ghai 2011-05-25 11:27:55 UTC
Didn't find the changes mentioned in comment 5 in the latest install guide at:

http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.0/pdf/Installation_Guide/Red_Hat_Update_Infrastructure-2.0-Installation_Guide-en-US.pdf

I tried to find under section "7.1. Managing Entitlement Certificates". Please point me the correct location, if its already there.

Comment 7 Lana Brindley 2011-05-26 22:48:57 UTC
It's in the Red Hat Content Certificates chapter.

LKB

Comment 8 Lana Brindley 2011-05-27 00:25:36 UTC
My bad. It's back in the Client Entitlements section now. Revision 1-11.

LKB

Comment 9 Sachin Ghai 2011-05-27 11:54:32 UTC
Thanks !

Verified in Install guide at:
http://documentation-stage.bne.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.0/pdf/Installation_Guide/Red_Hat_Update_Infrastructure-2.0-Installation_Guide-en-US.pdf

under section "Procedure 7.4. List Custom Repository Entitlements" ==> page 50

Comment 10 Lana Brindley 2011-07-29 04:42:13 UTC
This book is now available at http://docs.redhat.com/docs/en-US/Red_Hat_Update_Infrastructure/2.0/html/Installation_Guide/index.html

Please raise a new bug for any further changes.

LKB


Note You need to log in before you can comment on or make changes to this bug.