Project

General

Profile

Bug #16903

'katello-certs-check' should check for new line character at the end of certificates

Added by Stephen Benjamin almost 3 years ago. Updated about 1 year ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Installer
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1375072
I have few issues where customer generated custom certificate and installed on the Satellite but when he is trying to install "katello-ca-consumer-latest.noarch.rpm"(generated with customer certificate) package on the client getting below error:
----
[root@meltser-76 ~]# rpm Uvh http://satellite.example.com/pub/katello-ca-consumer-latest.noarch.rpm
Retrieving http://satellite.example.com/pub/katello-ca-consumer-latest.noarch.rpm
Preparing... ################################# [100%]
Updating / installing...
1:katello-ca-consumer-satellite.example################################# [100%]
/usr/bin/katello-rhsm-consumer: line 260: warning: here-document at line 102 delimited by end-of-file (wanted `EOM')
warning: %post(katello-ca-consumer-satellite.example.com-1.0-1.noarch) scriptlet failed, exit status 1
---

This is due to that custom certificate(one for all of them) not having a return/newline on the end of one of his certificates. When you cat the cert, it will appear like this:

-----END CERTIFICATE-----[root@sat62 ~]#

Entering a new line at the end of the certificate and re-run the satellite-installer helps to resolve the issue.

To eliminate the issue from the product, can we have the feature to detect this issue during "katello-certs-check" itself on the Satellite and provide proper error message so that do not run into this issue after generating Satellite certificates.

History

#1 Updated by Eric Helms almost 3 years ago

  • Subject changed from 'katello-certs-check' should check for new line character at the end of certificates to 'katello-certs-check' should check for new line character at the end of certificates
  • Priority changed from High to Normal
  • Legacy Backlogs Release (now unused) set to 188

#2 Updated by Justin Sherrill over 2 years ago

  • Legacy Backlogs Release (now unused) changed from 188 to 114

#3 Updated by Chris Roberts over 2 years ago

  • Status changed from New to Rejected

Also available in: Atom PDF