Bug #18403

capsule sync not working after hostname change

Added by John Mitsch about 1 month ago. Updated 2 days ago.

Assigned To:John Mitsch
Target version:Katello - Team Brad - Iteration 12
Difficulty: Pull request:https://github.com/Katello/katello-packaging/pull/397, https://github.com/Katello/katello/pull/6680
Bugzilla link:
Story points-
Velocity based estimate-


When one changes the hostname using katello-change-hostname, syncing and registering a capsule fails. The ueber cert is generated using the old CA and isn't changed, so its still using the old hostname

curl: (35) Peer does not recognize and trust the CA that issued your certificate.

Related issues

Related to Katello - Tracker #18273: hostname change issues New 01/26/2017

Associated revisions

Revision b0a41ac9
Added by John Mitsch 3 days ago

Fixes #18403 - Add rake task to regenerate ueber certs

This is a necessary step after the CA has changed for
any reason (like using katello-change-hostname)

Revision f95440fc
Added by John Mitsch 2 days ago

Refs #18403 - Regenerate ueber certs after hostname change
Depends on https://github.com/Katello/katello/pull/6680

Since we regenerate the CA, we need to regenerate the
ueber cert for each Organization.


#1 Updated by John Mitsch about 1 month ago

#2 Updated by John Mitsch about 1 month ago

This is actually related to https://bugzilla.redhat.com/show_bug.cgi?id=1418376 Once this is fixed an in our daily build we can use a rake task that runs something like "::Katello::Resources::Candlepin::Consumer.get({}).select{|c| c['type']['label'] == 'uebercert' }.each{|c| ::Katello::Resources::Candlepin::Consumer.destroy(c['uuid']) }" to fix it.

#3 Updated by John Mitsch about 1 month ago

workaround for the aforementioned candlepin bug: https://gist.github.com/johnpmitsch/af158851ddf1403a42343472a5b1d273

#4 Updated by Eric Helms 29 days ago

  • Project changed from Packaging to Katello

#5 Updated by John Mitsch 9 days ago

  • Target version set to Team Brad - Iteration 12

#6 Updated by The Foreman Bot 8 days ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/Katello/katello/pull/6680 added

#7 Updated by John Mitsch 4 days ago

  • Project changed from Katello to Packaging

#8 Updated by John Mitsch 3 days ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

#9 Updated by John Mitsch 3 days ago

  • Pull request https://github.com/Katello/katello-packaging/pull/397 added

Also available in: Atom PDF