Description of problem: Import is not working for cert v3 Version-Release number of selected component (if applicable): [root@rhel7 entitlement]# subscription-manager version server type: Red Hat Subscription Management subscription management server: 0.8.0-1 subscription-manager: 1.8.4-1.el7 python-rhsm: 1.8.7-1.el7 How reproducible: Steps to Reproduce: root@rhel7 ~]# subscription-manager register --consumerid 7fc3f329-d2f9-4455-ad78-b17e40326c49 Username: admin Password: The system has been registered with id: 7fc3f329-d2f9-4455-ad78-b17e40326c49 [root@rhel7 entitlement]# subscription-manager attach --auto Installed Product Current Status: Product Name: Awesome OS for S390 Bits Status: Not Subscribed Product Name: Stackable with Awesome OS for x86_64 Bits Status: Subscribed Product Name: Awesome OS Developer Basic Status: Not Subscribed Product Name: Awesome OS for x86_64/i686/ia64/ppc/ppc64/s390x/s390 Bits Status: Subscribed Product Name: Awesome OS Workstation Bits Status: Subscribed Product Name: Awesome OS Developer Bits Status: Not Subscribed Product Name: Management Bits Status: Subscribed Product Name: Large File Support Bits Status: Subscribed Product Name: Awesome OS Modifier Bits Status: Subscribed Product Name: Clustering Bits Status: Subscribed Product Name: Shared Storage Bits Status: Subscribed Product Name: Awesome OS Server Bits Status: Subscribed Product Name: Awesome OS Premium Architecture Bits Status: Not Subscribed Product Name: Awesome OS for ia64 Bits Status: Not Subscribed Product Name: Awesome OS for i686 Bits Status: Not Subscribed Product Name: Awesome OS for x86_64 Bits Status: Subscribed Product Name: Awesome OS for ppc64 Bits Status: Not Subscribed Product Name: Awesome OS for S390X Bits Status: Not Subscribed Product Name: Awesome OS for i386 Bits Status: Not Subscribed Product Name: Virt Only Awesome OS for i386 Bits Status: Not Subscribed Product Name: Awesome OS for x86 Bits Status: Not Subscribed Product Name: Multiplier Product Bits Status: Not Subscribed Product Name: Load Balancing Bits Status: Subscribed [root@rhel7 ~]# cd /etc/pki/entitlement/ [root@rhel7 entitlement]# ll total 48 -rw-------. 1 root root 1675 Mar 26 12:21 1193973098494226023-key.pem -rw-r--r--. 1 root root 2225 Mar 26 12:21 1193973098494226023.pem -rw-------. 1 root root 1675 Mar 26 12:21 367444258599797144-key.pem -rw-r--r--. 1 root root 2310 Mar 26 12:21 367444258599797144.pem -rw-------. 1 root root 1675 Mar 26 12:21 5792290617453316292-key.pem -rw-r--r--. 1 root root 2327 Mar 26 12:21 5792290617453316292.pem -rw-------. 1 root root 1675 Mar 26 12:21 6541142514225259410-key.pem -rw-r--r--. 1 root root 2493 Mar 26 12:21 6541142514225259410.pem -rw-------. 1 root root 1675 Mar 26 12:21 7953354226163674846-key.pem -rw-r--r--. 1 root root 2493 Mar 26 12:21 7953354226163674846.pem -rw-------. 1 root root 1675 Mar 26 12:21 8034292909509482372-key.pem -rw-r--r--. 1 root root 2046 Mar 26 12:21 8034292909509482372.pem [root@rhel7 entitlement]# cat 8034292909509482372.pem >> /root/cert.pem [root@rhel7 entitlement]# cat 8034292909509482372-key.pem >> /root/cert.pem [root@rhel7 entitlement]# subscription-manager clean All local data removed [root@rhel7 entitlement]# subscription-ma^C [root@rhel7 entitlement]# subscription-manager import --cert /root/cert.pem Successfully imported certificate cert.pem [root@rhel7 entitlement]# subscription-manager list --installed +-------------------------------------------+ Installed Product Status +-------------------------------------------+ Product Name: Awesome OS for S390 Bits Product ID: 100000000000060 Version: 3.11 Arch: s390 Status: Unknown Starts: Ends: Product Name: Stackable with Awesome OS for x86_64 Bits Product ID: 1000000000000023 Version: 3.11 Arch: x86_64 Status: Unknown Starts: Ends: Product Name: Awesome OS Developer Basic Product ID: 1144 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Awesome OS for x86_64/i686/ia64/ppc/ppc64/s390x/s390 Bits Product ID: 100000000000011 Version: 3.11 Arch: x86_64,i686,ia64,ppc,ppc64,s390x,s390 Status: Unknown Starts: Ends: Product Name: Awesome OS Workstation Bits Product ID: 27060 Version: 6.1 Arch: ALL Status: Unknown Starts: Ends: Product Name: Awesome OS Developer Bits Product ID: 1 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Management Bits Product ID: 37069 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Large File Support Bits Product ID: 37068 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Awesome OS Modifier Bits Product ID: 37080 Version: 6.1 Arch: ALL Status: Unknown Starts: Ends: Product Name: Clustering Bits Product ID: 37065 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Shared Storage Bits Product ID: 37067 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Awesome OS Server Bits Product ID: 37060 Version: 6.1 Arch: ALL Status: Unknown Starts: Ends: Product Name: Awesome OS Premium Architecture Bits Product ID: 37062 Version: 6.1 Arch: ppc64 Status: Unknown Starts: Ends: Product Name: Awesome OS for ia64 Bits Product ID: 100000000000006 Version: 3.11 Arch: ia64 Status: Unknown Starts: Ends: Product Name: Awesome OS for i686 Bits Product ID: 100000000000005 Version: 3.11 Arch: i686 Status: Unknown Starts: Ends: Product Name: Awesome OS for x86_64 Bits Product ID: 100000000000002 Version: 3.11 Arch: x86_64 Status: Unknown Starts: Ends: Product Name: Awesome OS for ppc64 Bits Product ID: 100000000000003 Version: 3.11 Arch: ppc64 Status: Unknown Starts: Ends: Product Name: Awesome OS for S390X Bits Product ID: 100000000000000 Version: 3.11 Arch: s390x Status: Unknown Starts: Ends: Product Name: Awesome OS for i386 Bits Product ID: 100000000000001 Version: 3.11 Arch: i386 Status: Unknown Starts: Ends: Product Name: Virt Only Awesome OS for i386 Bits Product ID: 100000000000069 Version: 3.11 Arch: i386 Status: Unknown Starts: Ends: Product Name: Awesome OS for x86 Bits Product ID: 100000000000020 Version: 8.6 Arch: x86 Status: Unknown Starts: Ends: Product Name: Multiplier Product Bits Product ID: 917571 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Product Name: Load Balancing Bits Product ID: 37070 Version: 1.0 Arch: ALL Status: Unknown Starts: Ends: Actual results: Expected results: Additional info:
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux release for currently deployed products. This request is not yet committed for inclusion in a release.
The certlib updater is not being used because it appears that the code treats the certificates as rogue, so deletes them.
Given our new model, this is correct. If you are not connected to a remote server the list --installed will always show you as Unknown. As long as list --consumed returns the correct subscription then you should be ok. Moving to ON_QA to verify. Also, including dgoodwin to verify.
Spot on. "Unknown" if you are not registered is now expected behaviour.
Future subscription is not a "true" status, we don't know if you're red/yellow/green in the future, it's just an indication that the client saw that you have some entitlements for the future. It is something the client decides to do though, and is not returned by the server, so it still works if you are not registered.
Moving the bug to verified!! Since the compliance is calculated at the server side,the system is not connected from server when the cert is import,hence the status remains unknown,also there is no cache on the system
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-1332.html