Project

General

Profile

Actions
Copy link

Bug #15530

closed

Katello 3.0 capsule fails to register

Added by Dylan Baars over 8 years ago. Updated over 6 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
Eric Helms
Category:
Foreman Proxy Content
Target version:
Katello Recycle Bin
Difficulty:
hard
Triaged:
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Hi,

I am running a CentOS7 server running Katello. This was upgraded from 2.4.4 to 3.0. After initial installation (of 2.4.4), I reconfigured katello with custom certificates using the following:

katello-installer --certs-server-cert "/certs/wellkatellotst.niwa.local.crt"\
--certs-server-cert-req "/certs/wellkatellotst.niwa.local.csr"\
--certs-server-key "/certs/wellkatellotst.niwa.local.key"\
--certs-server-ca-cert "/certs/niwa_cacert.pem"\
--certs-update-server --certs-update-server-ca

The upgrade to 3.0 went fine. I then proceeded to deploy a second VM, which I intend to run a Katello Capsule server on. I generated the certificates on my katello server:

Which gave me this output:

capsule-certs-generate --capsule-fqdn "wellcapsuletst.niwa.co.nz" \
--certs-tar "/root/wellcapsuletst.niwa.co.nz-certs.tar" 

To finish the installation, follow these steps:
If you do not have the smartproxy registered to the Katello instance, then please do the following:
1. yum -y localinstall http://wellkatellotst.niwa.local/pub/katello-ca-consumer-latest.noarch.rpm
  2. subscription-manager register --org "Default_Organization"
Once this is completed run the steps below to start the smartproxy installation:
1. Ensure that the foreman-installer-katello package is installed on the system.
  2. Copy /root/wellcapsuletst.niwa.co.nz-certs.tar to the system wellcapsuletst.niwa.co.nz
  3. Run the following commands on the capsule (possibly with the customized
     parameters, see foreman-installer --scenario capsule --help and
     documentation for more info on setting up additional services):
foreman-installer --scenario capsule\
                    --capsule-parent-fqdn                         "wellkatellotst.niwa.local"\
                    --foreman-proxy-register-in-foreman           "true"\
                    --foreman-proxy-foreman-base-url              "https://wellkatellotst.niwa.local"\
                    --foreman-proxy-trusted-hosts                 "wellkatellotst.niwa.local"\
                    --foreman-proxy-trusted-hosts                 "wellcapsuletst.niwa.co.nz"\
                    --foreman-proxy-oauth-consumer-key            "qgaSxsZ7vZKaDHpgDKtnoZLeMtXsrMbF"\
                    --foreman-proxy-oauth-consumer-secret         "bqVdk4EuczndKEqaABBmkgxjoNNDFVvd"\
                    --capsule-pulp-oauth-secret                   "MKLpZKfqKx9LN2rQq5tcjEDN3A9mKZTA"\
                    --capsule-certs-tar                           "/root/wellcapsuletst.niwa.co.nz-certs.tar" 
  The full log is at /var/log/capsule-certs-generate.log

I have attached the log file. I then followed http://www.katello.org/docs/3.0/installation/capsule.html to configure a VM and install the capsule. This failed with the following message on the console

Proxy wellcapsuletst.niwa.co.nz cannot be registered (422 Unprocessable Entity): Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([OpenSSL::SSL::SSLError]: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verif...) for proxy https://wellcapsuletst.niwa.co.nz:9090/features Please check the proxy is configured and running on the host.
[ERROR 2016-06-27 22:50:43 main]  /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[wellcapsuletst.niwa.co.nz]/ensure: change from absent to present failed: Proxy wellcapsuletst.niwa.co.nz cannot be registered (422 Unprocessable Entity): Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([OpenSSL::SSL::SSLError]: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verif...) for proxy https://wellcapsuletst.niwa.co.nz:9090/features Please check the proxy is configured and running on the host.

I have also attached the /var/log/foreman-installer/capsule.log

It seems to be complaining about a certificate verification failure

[ERROR 2016-06-27 22:50:36 main] /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[wellcapsuletst.niwa.co.nz]/ensure: change from absent to present failed: Proxy wellcapsuletst.niwa.co.nz cannot be registered (422 Unprocessable Entity): Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([OpenSSL::SSL::SSLError]: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verif...) for proxy https://wellcapsuletst.niwa.co.nz:9090/features Please check the proxy is configured and running on the host.
[ INFO 2016-06-27 22:50:36 main] RESOURCE Foreman_smartproxy[wellcapsuletst.niwa.co.nz]
[ERROR 2016-06-27 22:50:36 main] /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[wellcapsuletst.niwa.co.nz]: Failed to call refresh: Proxy wellcapsuletst.niwa.co.nz cannot be registered (ApipieBindings::MissingArgumentsError: id): N/A
[ERROR 2016-06-27 22:50:36 main] /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[wellcapsuletst.niwa.co.nz]: Proxy wellcapsuletst.niwa.co.nz cannot be registered (ApipieBindings::MissingArgumentsError: id): N/A

Help! :-)
Thanks,
Dylan

Files

capsule-certs-generate.log capsule-certs-generate.log 92.8 KB Dylan Baars, 06/27/2016 07:10 PM
capsule.log capsule.log 1.08 MB Dylan Baars, 06/27/2016 07:10 PM
Actions
Copy link

Also available in: Atom PDF