Bug 705476 - Allow a SSL ca cert to be passed into a repo to use for verifcation
Summary: Allow a SSL ca cert to be passed into a repo to use for verifcation
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Pulp
Classification: Retired
Component: z_other
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: Sprint 24
Assignee: John Matthews
QA Contact: Preethi Thomas
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-17 18:50 UTC by John Matthews
Modified: 2012-02-24 20:17 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-24 20:15:37 UTC


Attachments (Terms of Use)

Description John Matthews 2011-05-17 18:50:07 UTC
Pulp/Grinder were requiring a key, cert, and ca_cert in order to verify a SSL connection.  This bug addresseses the need to allow just the ca_cert to be added to a repo to verify the SSL connection.  


Version-Release number of selected component (if applicable):
pulp 177
grinder 0.97



Steps to Reproduce:
1. Host a repo with a https connection
2. Create a repo and add a --feed_ca
3. Sync the repo
  
Actual results:
Error, unable to fetch metadata

Expected results:
Sync should work and grinder/pulp will verify with the --feed_ca

Additional info:

Comment 1 John Matthews 2011-05-17 18:52:24 UTC
Also need to add support so we can view that a ca_cert/key were added in a repo list.

Currently repo list displays just info on 'feed_cert' or 'consumer_cert'

Id                 	rhel6_x86_64_debug       
Name               	rhel6_x86_64_debug       
Feed URL           	https://pulp-dev.app.eng.bos.redhat.com/pulp/repos/released/RHEL-6-Client/6.0/x86_64/debug/
Feed Type          	remote                   
Feed Certs         	No                       
Consumer Certs     	No                       
Architecture       	noarch                   
Sync Schedule      	None                     
Packages           	1374                     
Files              	0                        
Distributions      	None                     
Publish            	True                     
Clones             	[]                       
Groups             	None                     
Filters            	[]                       
Notes              	{}

Comment 3 Jeff Ortel 2011-05-18 21:07:01 UTC
build: 0.178

Comment 4 Preethi Thomas 2011-09-21 20:46:36 UTC
verified
[root@preethi ~]# rpm -q pulp
pulp-0.0.232-1.fc15.noarch

[root@preethi ~]# pulp-admin -u admin -p admin repo create --preserve_metadata --id=protected_test_repo2  --feed=https://cdn.redhat.com/content/dist/rhel/rhui/server/6/6Server/x86_64/rhui/2.0/os --feed_ca=/root/cdn_certs/rhui-rhqe/cdn.redhat.com-chain.crt --feed_cert=/root/cdn_certs/rhui-rhqe/rhui-rhqe-20110803.crt --feed_key=/root/cdn_certs/rhui-rhqe/rhui-rhqe-20110803.key 
Successfully created repository [ protected_test_repo2 ]


[root@preethi ~]# 
[root@preethi ~]# pulp-admin -u admin -p admin repo sync --id=protected_test_repo2 -F
Sync for repository protected_test_repo2 started
Sync: Finished
32/32 new items downloaded
0/32 existing items processed

Item Details: 
Rpms: 32/32

Comment 5 Preethi Thomas 2012-02-24 20:15:37 UTC
Pulp v1.0 is released
Closed Current Release.

Comment 6 Preethi Thomas 2012-02-24 20:17:14 UTC
Pulp v1.0 is released.


Note You need to log in before you can comment on or make changes to this bug.