Bug 72300 - removing the ssl cert rpm leaves apache in a broken state.
Summary: removing the ssl cert rpm leaves apache in a broken state.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite 5
Classification: Red Hat
Component: Server
Version: unspecified
Hardware: i386
OS: Linux
high
medium
Target Milestone: ---
Assignee: Mihai Ibanescu
QA Contact: Fanny Augustin
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2002-08-22 20:17 UTC by Todd Warner
Modified: 2007-07-31 19:24 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2002-08-26 18:35:06 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Todd Warner 2002-08-22 20:17:40 UTC
rpm -e rhns-ssl-cert.rpm (or whatever it is called) on a satellite (or proxy)

Apache will no longer restart because 
/etc/http/conf/ssl.{crt,key}/server.{crt,key} were nuked.

We probably need to backup and restore their original server.{crt,key} files upon
installation and removal of this package.

Comment 1 Greg DeKoenigsberg 2002-08-22 20:46:44 UTC
Yeah.  In fact, we should probably consider making proper sslCACert
configuration a function of both install and removal.

On installation of a custom cert package, %post should alter
/etc/sysconfig/rhn/up2date and /etc/sysconfig/rhn/rhn_register, adding the new
sslCACert line to each: 

sslCACert=/usr/share/rhn/RHNS-CORP-CA-CERT

On removal of the custom cert package, %post should return the default setting.

Comment 2 Mihai Ibanescu 2002-08-22 23:00:41 UTC
Todd was actually referring to the server-side (i.e. proxy/satellite) apache
config. I do agree that it would be nice to modify stuff in the post section,
but I don't think it's the right time to do it.

Comment 3 Mihai Ibanescu 2002-08-22 23:10:12 UTC
I do agree that it would be nice to modify stuff in the post section FOR THE
CLIENT, but I don't think it's the right time to do it.

This is what I actually meant

Comment 4 Josef Komenda 2002-08-23 20:06:18 UTC
Bumping to high priority.

Comment 5 Mihai Ibanescu 2002-08-23 23:06:59 UTC
Fixed. rhns-certs-tools 1.3.0-4 should fix this.
Added a postun scriptlet (stolen from mod_ssl) to recreate the dummy certs.

Comment 6 Josef Komenda 2002-08-26 20:14:13 UTC
confirmed good - closing.


Note You need to log in before you can comment on or make changes to this bug.