Project

General

Profile

Bug #34888

Installer spams with katello-certs-check output when using custom certs

Added by Eric Helms about 2 months ago. Updated about 2 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

b'Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=2073305 \n\n*Description of problem:*\nWhen using custom certs, and running the installer to enable a feature or anything, it re-runs katello-certs-check to verify certs and the output is visible on the shell, confusing the user:\n\n foreman-installer \n2022-04-08 07:46:31 [NOTICE] [root] Loading installer configuration. This will take some time.\n2022-04-08 07:46:38 [NOTICE] [root] Running installer with log based terminal output at level NOTICE.\n2022-04-08 07:46:38 [NOTICE] [root] Use -l to set the terminal output log level to ERROR, WARN, NOTICE, INFO, or DEBUG. See --full-help for definitions.\nPackage versions are locked. Continuing with unlock.\nExecuting: katello-certs-check -c "/root/satellite_cert/satellite_cert.pem" -k "/root/satellite_cert/satellite_cert_key.pem" -b "/root/satellite_cert/ca_cert_bundle.pem"\ntput: No value for $TERM and no -T specified\ntput: No value for $TERM and no -T specified\ntput: No value for $TERM and no -T specified\ntput: No value for $TERM and no -T specified\nChecking server certificate encoding: [OK]\n\nChecking expiration of certificate: [OK]\n\nChecking expiration of CA bundle: [OK]\n\nChecking if server certificate has CA:TRUE flag [OK]\n\nChecking for private key passphrase: [OK]\n\nChecking to see if the private key matches the certificate: [OK]\n\nChecking CA bundle against the certificate file: [OK]\n\nChecking CA bundle size: 3\n[OK]\n\nChecking Subject Alt Name on certificate [OK]\n\nChecking if any Subject Alt Name on certificate matches the Subject CN\n[OK]\n\nChecking Key Usage extension on certificate for Key Encipherment [OK]\n\nChecking for use of shortname as CN\n[OK]\n\nValidation succeeded\n\n\nTo install the Red Hat Satellite server with the custom certificates, run:\n\n satellite-installer --scenario satellite \\\n --certs-server-cert "/root/satellite_cert/satellite_cert.pem" \\\n --certs-server-key "/root/satellite_cert/satellite_cert_key.pem" \\\n --certs-server-ca-cert "/root/satellite_cert/ca_cert_bundle.pem"\n\nTo update the certificates on a currently running Red Hat Satellite installation, run:\n\n satellite-installer --scenario satellite \\\n --certs-server-cert "/root/satellite_cert/satellite_cert.pem" \\\n --certs-server-key "/root/satellite_cert/satellite_cert_key.pem" \\\n --certs-server-ca-cert "/root/satellite_cert/ca_cert_bundle.pem" \\\n --certs-update-server --certs-update-server-ca\n\nTo use them inside a NEW $CAPSULE, rerun this command with -t capsule\n2022-04-08 07:46:53 [NOTICE] [configure] Starting system configuration.\n\xe2\x80\xa6\n\n*Version-Release number of selected component (if applicable):*\nforeman-installer-3.1.2.1-1.el8sat.noarch\nforeman-installer-katello-3.1.2.1-1.el8sat.noarch\nsatellite-installer-6.11.0.5-1.el8sat.noarch\n\n\n*How reproducible:*\n100%\n\n*Steps to Reproduce:*\n1. install with certs\n2. call installer again\n\n*Actual results:*\ncerts-check output as above\n\n*Expected results:*\nsilence\n\n*Additional info:*'

Associated revisions

Revision 688d0a7d (diff)
Added by Eric Helms about 2 months ago

Fixes #34888: Display katello-certs-check output only if error

History

#1 Updated by The Foreman Bot about 2 months ago

  • Assignee set to Eric Helms
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-installer/pull/770 added

#2 Updated by The Foreman Bot about 2 months ago

  • Fixed in Releases 3.3.0 added

#3 Updated by Eric Helms about 2 months ago

  • Status changed from Ready For Testing to Closed

#4 Updated by Amit Upadhye about 2 months ago

  • Subject changed from b'installer spams with katello-certs-check output when using custom certs' to installer spams with katello-certs-check output when using custom certs

#5 Updated by Amit Upadhye about 2 months ago

  • Subject changed from installer spams with katello-certs-check output when using custom certs to Installer spams with katello-certs-check output when using custom certs

Also available in: Atom PDF