Description of Problem: Unable to upgrade Satellite Certs currently - need to fix this so test/demo users can pay us and get a working product. Version-Release number of selected component (if applicable): see bug 63780
Currently, we add the new cert to the satellite - foo.cert - then run: . /etc/profile.d/oracle.sh validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg --dsn webdev --upgrade < /root/cert.foo This is the result against the live site: [root@sat-app root]# validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg --dsn webdev --upgrade < /root/cert.foo Undefined subroutine &main::upgrade called at lib/Getopt/Long.pm (autosplit into lib/auto/Getopt/Long/GetOptions.al) line 555. Signatures signed by Red Hat, Inc (Red Hat Network) <rhn-feedback> (B1EE1799F24F1B08). Proceding to populate database webdev... Rolling back database handle. at /usr/lib/perl5/site_perl/5.6.1/i386-linux/RHN/DB.pm line 276. and on sat-inst (qa) [root@sat-inst root]# validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg --dsn webdev --upgrade < /root/cert.foo Undefined subroutine &main::upgrade called at lib/Getopt/Long.pm (autosplit into lib/auto/Getopt/Long/GetOptions.al) line 555. protocol error: expected SIG_ID at /usr/lib/perl5/site_perl/5.6.1/i386-linux/RHN/GPG.pm line 161 The results of this do not get propigated to the website (that is, I don't see the upgraded sert on my satellite entitlement), and the AS channels do not show up in satellite-sync --listchannels
Ok, fixed in cvs in RELEASE-1_9_7 and HEAD. Will need to build new packages... might have to force the install. We'll go through this one tomorrow morning.
I ran: validate-sat-cert.pl --keyring /etc/webapp-keyring.gpg --dsn webdev --upgrade < /tmp/cert.foo ...and it didn't give me any errors. The Satellite (http://sat-inst.webdev-colo.redhat.com/) shows 150 Enterprise slots, which is corrent, but no Advanced Server channels. satellite-sync --listchannels Does not show advanced server available either. Logging into WebQA does not show the new cert either. Perhaps all of the code was not pushed...
Increasing priority for this.
Looking at the file /usr/bin/validate-sat-cert.pl on sat-inst .... This isn't the latest version. Not really sure why the build process for the satellite installer isn't picking this up. ... Ok, read an email from Xian: " I would like to point out that most of the stuff under rhn/satellite ends up in packages or on the installer disc somehow. therefore if you commit a change there (mostly in the admin, certs or tools dir) please make sure you rebuilt the appropiate packages with ./build --satellite <package> Look under rhn/build/satellite/packages.conf to find out the package names. If you change something, please don;t assume it will end up in a package we ship somehow. *YOU* HAVE TO MAKE SURE THAT HAPPENS. Thanks, Cristian " So, I rebuilt the admin package. We should build the installer and try again.
Got it to work on webQA using latest packages and a revised commandline: validate-sat-cert.pl --send --url https://rhn.webqa.redhat.com/rpc/satellite.pxt --keyring /etc/webapp-keyring.gpg --dsn webdev --upgrade < /tmp/cert.foo Will do a clean build/kickstart/test to confirm good.
Fixed, closing.
Per Chip, this is not fixed.
Ok, fixed now. Have stress tested this in the extreme. (AS client through a RHN-Proxy to the Satellite) Closing.