Bug #18403
capsule sync not working after hostname change
Description
When one changes the hostname using katello-change-hostname, syncing and registering a capsule fails. The ueber cert is generated using the old CA and isn't changed, so its still using the old hostname
curl: (35) Peer does not recognize and trust the CA that issued your certificate.
Related issues
Associated revisions
Refs #18403 - Regenerate ueber certs after hostname change
Depends on https://github.com/Katello/katello/pull/6680
Since we regenerate the CA, we need to regenerate the
ueber cert for each Organization.
History
#1
Updated by John Mitsch over 5 years ago
- Related to Tracker #18273: hostname change issues added
#2
Updated by John Mitsch over 5 years ago
This is actually related to https://bugzilla.redhat.com/show_bug.cgi?id=1418376 Once this is fixed an in our daily build we can use a rake task that runs something like "::Katello::Resources::Candlepin::Consumer.get({}).select{|c| c['type']['label'] == 'uebercert' }.each{|c| ::Katello::Resources::Candlepin::Consumer.destroy(c['uuid']) }" to fix it.
#3
Updated by John Mitsch over 5 years ago
workaround for the aforementioned candlepin bug: https://gist.github.com/johnpmitsch/af158851ddf1403a42343472a5b1d273
#4
Updated by Eric Helms over 5 years ago
- Project changed from Packaging to Katello
#5
Updated by John Mitsch over 5 years ago
- Target version set to 178
#6
Updated by The Foreman Bot over 5 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/Katello/katello/pull/6680 added
#7
Updated by John Mitsch over 5 years ago
- Project changed from Katello to Packaging
#8
Updated by John Mitsch over 5 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset katello:katello|b0a41ac9bc0c2a5ae780d8d544a33f3cb68e5300.
#9
Updated by John Mitsch over 5 years ago
- Pull request https://github.com/Katello/katello-packaging/pull/397 added
#10
Updated by John Mitsch over 5 years ago
- Legacy Backlogs Release (now unused) set to 209
#11
Updated by John Mitsch over 5 years ago
- Bugzilla link set to 924383
#12
Updated by Eric Helms over 5 years ago
- Project changed from Packaging to Katello
- Pull request deleted (
https://github.com/Katello/katello-packaging/pull/397, https://github.com/Katello/katello/pull/6680)
Fixes #18403 - Add rake task to regenerate ueber certs
This is a necessary step after the CA has changed for
any reason (like using katello-change-hostname)