[Spacewalk-list] RE: Custom Certificate Creation - "invalid mode" signing cert

[Greg Fuller]

To follow-up on my own question (and for future reference) I was able to
resolve this.  

The gen-oss-sat-cert.pl script will only work with Spacewalk .2.  I was
able to find a repo that has the rpm's for .2 and grab all the install
files.  

Work through all of the dependancy changes (lots of perl modules that
changed names and specific versions required) by adding the RPMForge
repo and key:

	rpm -Uhv
http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6
-1.el5.rf.i386.rpm

	http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt

Just about all of the dependancies are resolved.  I did have to manually
download the following rpms in order to get it to work:

	perl-Network-IPv4Addr-0.05-13.el5.noarch.rpm
	perl-DateTime-0.4305-1.el5.rf.i386.rpm
	perl-NOCpulse-Scheduler-1.58.8-1.el5.sw.noarch.rpm
	perl-libapreq2-2.09-0.rc2.1.el5.i386.rpm
	perl-Apache-Admin-Config-0.94-1.el5.rf.noarch.rpm
	libapreq2-2.09-0.rc2.1.el5.i386.rpm
	rhn-check-0.4.19-4.el5.noarch.rpm
	rhn-client-tools-0.4.19-4.el5.noarch.rpm
	rhnlib-2.2.5-1.noarch.rpm

Remove the following:

	rhn-custom-info-5.2.0-1.noarch.rpm
	rhn-virtualization-common-5.2.0-5.noarch.rpm
	rhn-virtualization-guest-5.2.0-5.noarch.rpm
	rhn-virtualization-host-5.2.0-5.noarch.rpm
	rhn-kickstart-5.2.0-5.noarch.rpm
	rhn-kickstart-common-5.2.0-5.noarch.rpm
	rhn-kickstart-virtualization-5.2.0-5.noarch.rpm

The only dependancy I wasn't able to resolve was:

SatConfig-installer-3.24.0-7.el5.noarch from
/SatConfig-installer-3.24.0-7.el5.noarch has depsolving problems
  --> Missing Dependency: perl(NOCpulse::Scheduler::Event::ProbeEvent)
is needed by package SatConfig-installer-3.24.0-7.el5.noarch
(/SatConfig-installer-3.24.0-7.el5.noarch)


But you can get by without it to get spacewalk .2 installed by doing:

	yum localinstall *.rpm --nogpgcheck --skip-broken

Then go ahead and follow the directions at:

	https://fedorahosted.org/spacewalk/wiki/CertCreation

To create and sign the entitlement certificate.  Take the signed cert to
a freshly installed latest version of spacewalk and replace
/usr/share/spacewalk/setup/spacewalk-public.cert with your new
entitlement certificate file and your good to go.

Hopefully this helps someone else out there.  If anyone else is trying
to do this I can try to package up the VM that I did this in (ESX
machine v7 format) and make it available.

--greg


Gregory A. Fuller - CCNA
Network Manager
State University of New York at Oswego
Phone: (315) 312-5750
http://www.oswego.edu/~gfuller