Bug 729670 - Statements 'RHN Parent' and 'CA Chain' should be dismissed.
Summary: Statements 'RHN Parent' and 'CA Chain' should be dismissed.
Alias: None
Product: Red Hat Satellite Proxy 5
Classification: Red Hat
Component: Installer
Version: 541
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
Assignee: Miroslav Suchý
QA Contact: Red Hat Satellite QA List
Depends On:
Blocks: 462714
TreeView+ depends on / blocked
Reported: 2011-08-10 13:57 UTC by Dimitar Yordanov
Modified: 2011-08-10 14:42 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2011-08-10 14:42:46 UTC

Attachments (Terms of Use)

Description Dimitar Yordanov 2011-08-10 13:57:37 UTC
Description of problem:
First two statements of the RHN Proxy Installer should be dismissed.

RHN Parent [dyordano-09.lab.eng.brq.redhat.com]: 
CA Chain [/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT]: 

I think changing RHN Parent or CA Chain at that point is out of question.

Version-Release number of selected component (if applicable):
RHN-Proxy 5.4.1

How reproducible:

Steps to Reproduce:
1. Start Installation Process of RHN-Proxy : configure-proxy.sh 

Actual results:

RHN Parent [xxxxxx-xx.redhat.com]: 
CA Chain [/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT]: 

Expected results:

Proxy version to activate [5.4]: 
Traceback email []: 

Additional info:

Comment 1 Miroslav Suchý 2011-08-10 14:05:07 UTC

Comment 2 Dimitar Yordanov 2011-08-10 14:09:25 UTC
I guess if you change it at this point installation will not succeed.

Comment 3 Miroslav Suchý 2011-08-10 14:42:46 UTC
I guess you guess it incorrectly.

It will succeed if following conditions are met:
1) you use --force-own-ca or
2) that CA-cert is identical with /root/ssl-build/RHN-ORG-TRUSTED-SSL-KEY (CA cert generated by rhn-ssl-tool).

ad RHN Parent:
of course you most probably do not want to change the default value. This is more written as note so you are sure against which Satellite/hosted you are registering against.
Well there may be somthing like:
 You are trying to activate against your.satellite.com. Is this correct? [Y/n]
But I really if the later formulation has more benefit, compared to former formulation.

Note You need to log in before you can comment on or make changes to this bug.