Bug #16918
openWhen default-ca is updated, the candlepin amqp keystore is not updated
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1357028
Description of problem:
When a new default-ca gets generated (which should be pretty rare case)
and can happen for example when the /root/ssl-build directory is removed
without a backup, the installer generates a new ca, but it fails
updating the /etc/candlepin/certs/amqp directory with the new ca, which causes issues when connecting to qpid later.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. satellite-installer --scenario=satellite
2. rm -rf /root/ssl-build
3. satellite-installer
Actual results:
candlepin doesn't start, causing errors in db:seed:
2016-07-15 13:43:57 [app] [W] Katello::Resources::Candlepin::CandlepinPing: 404 Resource Not Found (GET /candlepin/status) | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/abstract_response.rb:48:in `return!' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:230:in `process_result' | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.37/lib/restclient_ext/request.rb:50:in `block in transmit' | /opt/rh/rh-ruby22/root/usr/share/ruby/net/http.rb:853:in `start'
with this errors in /var/log/messages
Jul 15 13:34:35 localhost qpidd20788: 2016-07-15 13:34:35 [System] error Connection qpid.192.168.121.41:5671-192.168.121.41:51208 No protocol received closing
Jul 15 13:34:35 localhost qpidd: 2016-07-15 13:34:35 [System] error Connection qpid.192.168.121.41:5671-192.168.121.41:51208 No protocol received closing
Jul 15 13:34:45 localhost qpidd: 2016-07-15 13:34:45 [System] error Connection qpid.192.168.121.41:5671-192.168.121.41:51210 No protocol received closing
Jul 15 13:34:45 localhost qpidd20788: 2016-07-15 13:34:45 [System] error Connection qpid.192.168.121.41:5671-192.168.121.41:51210 No protocol received closing
Jul 15 13:34:48 localhost server: Jul 15, 2016 1:34:48 PM org.apache.catalina.core.StandardContext startInternal
Jul 15 13:34:48 localhost server: SEVERE: Error listenerStart
A workaround is
mv /etc/candlepin/certs/amqp /etc/candlepin/certs/amqp.bak
satellite-installer
Updated by Chris Roberts over 8 years ago
- Subject changed from When default-ca is updated, the candlepin amqp keystore is not updated to When default-ca is updated, the candlepin amqp keystore is not updated
- Assignee set to Chris Roberts
Updated by Justin Sherrill over 8 years ago
- Translation missing: en.field_release set to 114