[Spacewalk-list] Spacewalk behind reverse SSL proxy

[Thomas Bendler]

Hi,

I have a problem with spacewalk (0.5) operated behind a reverse SSL proxy
(squid-2.6.STABLE21-3.el5). When I bootstrap a system from inside everything
works fine. When I try to bootstrap a system from outside I got the
following errors:

bootstrap:
[...]
REGISTRATION
------------
* registering
Ein Fehler trat auf:
zlib.error
Siehe /var/log/up2date für weitere Informationen
[...]

up2date log:
Traceback (most recent call last):
  File "/usr/sbin/rhnreg_ks", line 267, in ?
    cli.run()
  File "/usr/share/rhn/up2date_client/rhncli.py", line 65, in run
    sys.exit(self.main() or 0)
  File "/usr/sbin/rhnreg_ks", line 88, in main
    rhnreg.getCaps()
  File "/usr/share/rhn/up2date_client/rhnreg.py", line 324, in getCaps
    s.capabilities.validate()
  File "/usr/share/rhn/up2date_client/rhnserver.py", line 154, in
__get_capabilities
    self.registration.welcome_message()
  File "/usr/share/rhn/up2date_client/rhnserver.py", line 50, in __call__
    return rpcServer.doCall(method, *args, **kwargs)
  File "/usr/share/rhn/up2date_client/rpcServer.py", line 194, in doCall
    ret = method(*args, **kwargs)
  File "/usr/lib64/python2.4/xmlrpclib.py", line 1096, in __call__
    return self.__send(self.__name, args)
  File "/usr/share/rhn/up2date_client/rpcServer.py", line 38, in _request1
    ret = self._request(methodname, params)
  File "/usr/lib/python2.4/site-packages/rhn/rpclib.py", line 319, in
_request
    request, verbose=self._verbose)
  File "/usr/lib/python2.4/site-packages/rhn/transports.py", line 187, in
request
    return self._process_response(fd, connection)
  File "/usr/lib/python2.4/site-packages/rhn/transports.py", line 194, in
_process_response
    fd = resp.decode(fd)
  File "/usr/lib/python2.4/site-packages/rhn/transports.py", line 440, in
decode
    data = obj.decompress(self.io.read()) + obj.flush()
zlib.error: Error -3 while decompressing: incorrect header check

I've replaced RHN-ORG-TRUSTED-SSL-CERT with the CA Certificate valid for our
domain (export from Firefox3) and the hostname with the public name of our
reverse SSL proxy. Any ideas where to turn on additional debug log or how to
fix this?

Regards, Thomas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20090427/be0b8267/attachment.htm>