Bug #18403

capsule sync not working after hostname change

Added by John Mitsch over 1 year ago. Updated 6 days ago.

Status:Closed
Priority:Normal
Assignee:John Mitsch
Category:-
Target version:1.15.0
Difficulty: Team Backlog:
Triaged:Yes Fixed in Releases:
Bugzilla link:924383 Found in Releases:
Pull request:

Description

When one changes the hostname using katello-change-hostname, syncing and registering a capsule fails. The ueber cert is generated using the old CA and isn't changed, so its still using the old hostname

curl: (35) Peer does not recognize and trust the CA that issued your certificate.

Related issues

Related to Katello - Tracker #18273: hostname change issues Closed 01/26/2017

Associated revisions

Revision b0a41ac9
Added by John Mitsch over 1 year ago

Fixes #18403 - Add rake task to regenerate ueber certs

This is a necessary step after the CA has changed for
any reason (like using katello-change-hostname)

Revision f95440fc
Added by John Mitsch over 1 year ago

Refs #18403 - Regenerate ueber certs after hostname change
Depends on https://github.com/Katello/katello/pull/6680

Since we regenerate the CA, we need to regenerate the
ueber cert for each Organization.

History

#1 Updated by John Mitsch over 1 year ago

#2 Updated by John Mitsch over 1 year ago

This is actually related to https://bugzilla.redhat.com/show_bug.cgi?id=1418376 Once this is fixed an in our daily build we can use a rake task that runs something like "::Katello::Resources::Candlepin::Consumer.get({}).select{|c| c['type']['label'] == 'uebercert' }.each{|c| ::Katello::Resources::Candlepin::Consumer.destroy(c['uuid']) }" to fix it.

#3 Updated by John Mitsch over 1 year ago

workaround for the aforementioned candlepin bug: https://gist.github.com/johnpmitsch/af158851ddf1403a42343472a5b1d273

#4 Updated by Eric Helms over 1 year ago

  • Project changed from Packaging to Katello

#5 Updated by John Mitsch over 1 year ago

  • Target version set to 178

#6 Updated by The Foreman Bot over 1 year ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/Katello/katello/pull/6680 added

#7 Updated by John Mitsch over 1 year ago

  • Project changed from Katello to Packaging

#8 Updated by John Mitsch over 1 year ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100

#9 Updated by John Mitsch over 1 year ago

  • Pull request https://github.com/Katello/katello-packaging/pull/397 added

#10 Updated by John Mitsch over 1 year ago

  • Legacy Backlogs Release (now unused) set to 209

#11 Updated by John Mitsch about 1 year ago

  • Bugzilla link set to 924383

#12 Updated by Eric Helms about 1 year ago

  • Project changed from Packaging to Katello
  • Pull request deleted (https://github.com/Katello/katello-packaging/pull/397, https://github.com/Katello/katello/pull/6680)

Also available in: Atom PDF