[Spacewalk-list] client registration issue
Scott Worthington
scott.c.worthington at gmail.com
Mon Jan 16 15:11:15 UTC 2012
On Monday, January 16, 2012 8:12:57 AM, Michael Mraka wrote:
> Christopher J Petrolino wrote:
> % Hello,
> %
> % I am having a heck of a time trying to figure out why I can't register
> % clients with my new spacewalk server. Here is what my /var/log/up2date
> % says -
> %
> %
> % [Sun Jan 15 23:41:43 2012] rhn_register
> % Traceback (most recent call last):
> % File "/usr/sbin/rhn_register", line 76, in ?
> % app.run()
> % File "/usr/share/rhn/up2date_client/rhncli.py", line 75, in run
> % sys.exit(self.main() or 0)
> % File "/usr/sbin/rhn_register", line 58, in main
> % ui.main()
> % File "/usr/share/rhn/up2date_client/tui.py", line 1266, in main
> % tui.run()
> % File "/usr/share/rhn/up2date_client/tui.py", line 1224, in run
> % result = win.run()
> % File "/usr/share/rhn/up2date_client/tui.py", line 236, in run
> % tui_call_wrapper(self.screen, rhnreg.getCaps)
> % File "/usr/share/rhn/up2date_client/tui.py", line 86, in tui_call_wrapper
> % FatalErrorWindow(screen, e.errmsg)
> % exceptions.AttributeError: SSLCertificateVerifyFailedError instance
> % has no attribute 'errmsg'
>
> What's your rhn_register version?
>
> rpm -qf /usr/bin/rhn_register
>
> % I *think* I have my ssl certs set correctly on both the client and the
> % server. Can anyone give me anyone suggest any troubleshooting tips?
>
> You can check ssl certificate using
> curl --cacert /path/to/your/RHN-ORG-TRUSTED-SSL-CERT https://<satellite.fqdn>/
>
> Regards,
>
> --
> Michael Mráka
> Satellite Engineering, Red Hat
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
Here are my results to the above SSL Certificate Check
in a working environment. I hope this helps someone.
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
EXAMPLE #1: A successful test connection with curl looks like:
NOTE: replace "VALID.SPACEWALK.FQDN" below with your own FQDN to
your Spacewalk server.
$ curl --cacert /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
https://VALID.SPACEWALK.FQDN/
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a
href="https://VALID.SPACEWALK.FQDN/rhn/Login.do">here</a>.</p>
<hr>
<address>Apache Server at VALID.SPACEWALK.FQDN Port 443</address>
</body></html>
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
EXAMPLE #2: Testing using a Spacewalk Proxy:
If your client is using a Spacewalk Proxy, the output will
look like:
NOTE: Replace "SPACEWALK.PROXY.FQDN" with your own FQDN
to your Spacewalk PROXY server.
$ curl --cacert /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
https://SPACEWALK.PROXY.FQDN/
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<!-- Id: -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Spacewalk Proxy Server</title>
<link rel="shortcut icon" href="_rhn_proxy/favicon.ico" />
<style>
<!--
body {
font-family: sans;
font-size: 90%;
background-color: black;
}
#rhn-proxy-logo {
text-align: center;
vertical-align: middle;
margin-top: 20%;
}
#content {
text-align: center;
margin: 2em 25% 0 25%;
font-weight: bold;
color: #ccc;
}
#footer {
font-size: 70%;
font-weight: normal;
}
a:link {
font-weight: bold;
text-decoration: none;
color: #ccc;
}
a:visited {
font-weight: bold;
text-decoration: none;
color: #ccc;
}
a:hover, a:active {
font-weight: bold;
text-decoration: none;
color: #00aad4;
}
-->
</style>
</head>
<body>
<div id="rhn-proxy-logo">
<img src="_rhn_proxy/spacewalk-logo.png" alt="Spacewalk -
Management Proxy" />
</div>
<div id="content">
<a href="pub/">[pub]</a>
<p id="footer">Spacewalk Proxy</p>
</div>
</body>
</html>
More information about the Spacewalk-list
mailing list