Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 760962

Summary: <clientcert> not automatically included in system templates
Product: Red Hat Satellite Reporter: James Laska <jlaska>
Component: Content ManagementAssignee: Katello Bug Bin <katello-bugs>
Status: CLOSED DUPLICATE QA Contact: Katello QA List <katello-qa-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0.0CC: bkearney, jsherril, jturner
Target Milestone: UnspecifiedKeywords: Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-01-22 21:42:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
template.xml (missing <clientcert>) none

Description James Laska 2011-12-07 13:00:10 UTC
Created attachment 541943 [details]
template.xml (missing <clientcert>)

Description of problem:

It seems the Org uebercert is not automatically included in generated system templates for promoted content.

The <clientcert> is included

Version-Release number of selected component (if applicable):
 * candlepin-0.5.3-1.el6.src.rpm
 * katello-0.1.126-2.el6.src.rpm
 * katello-certs-tools-1.0.1-1.el6.src.rpm
 * katello-cli-0.1.22-2.el6.src.rpm
 * katello-configure-0.1.26-2.el6.src.rpm
 * katello-httpd-ssl-key-pair-1.0-1.src.rpm
 * katello-qpid-broker-key-pair-1.0-1.src.rpm
 * katello-trusted-ssl-cert-1.0-1.src.rpm
 * pulp-0.0.248-3.el6.src.rpm

How reproducible:
 * Reproduced on RHEL6.2 system using both brew and upstream katello packages

Steps to Reproduce:
1. Click "Content Management" -> "System Templates"
2. Click a system template, then choose "Download"
  
Actual results:

See attached example template that is missing <clientcert>.  

Expected results:

Either ...
 1) The downloaded template should already include a <clientcert>
    or
 2) A warning dialog appears when downloading a template that a uebercert has not been generated

Additional info:

* The downloaded template does include an XML comment that indicates the template is broken, however I'm not sure that's enough.

    <!-- Template is not complete and will likely fail. -->
    <!--  - Uebercert for ACME_Corporation has not been generated. -->

* To ensure that <clientcert> is included in the template, one must follow the procedure below.  Afterwards, <clientcert> is included in any system templates.
  1) Click "Organizations"
  2) Click applicable org (e.g. ACME_Corporation)
  3) Click "Debug Certificate"
  4) Click "Ddownload"

Comment 4 Justin Sherrill 2013-01-22 21:42:19 UTC
I believe this was handled in bug 783576.  we no longer require the user to generate a cert before exporting a template.  If one has not been generated when the user clicks download, we generate it for them.   Going to close as a duplicate, if you feel it isn't, please reopen.

*** This bug has been marked as a duplicate of bug 783576 ***