[Spacewalk-list] Your satellite certificate has expired

Mon Jul 16 13:28:31 UTC 2018

Hello Tomáš,

Thank for your reply.
Update to the newest version is planned but first of all I need to resolve this issue.
I’ve read your other message regarding this issue with the refreshing-certificate link.
It was really helpful, thanks a lot… Is there a possibility of checking if this is ok for spacewalk?

Best regards,
Jérôme

From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of jin&hitman&Barracuda
Sent: Montag, 16. Juli 2018 13:58
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Your satellite certificate has expired

Your SP version and mine are same. But I did not get the error message like you got. With Spacewalk version 2.5 this certification control code has been dropped and no longer using. If I wasn't able to solve this problem, I was going to upgrade to version 2.5 eventually.

2018-07-16 13:55 GMT+03:00 Jérôme Meyer <Jerome.Meyer at lcsystems.ch<mailto:Jerome.Meyer at lcsystems.ch>>:
Hi Jin,

I’ve encoutered today the same issue. Thanks for your docs at github.
Unfortunately, the following messages appeared during the activation.

*****
root at xy ~/.gnupg # rhn-satellite-activate --rhn-cert=/usr/share/spacewalk/setup/spacewalk-public.cert --disconnected -vvv
HTTP_PROXY: None
HTTP_PROXY_USERNAME: None
HTTP_PROXY_PASSWORD: <password>
CA_CERT: /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT
Checking cert XML sanity and GPG signature: '/usr/bin/validate-sat-cert.pl<http://validate-sat-cert.pl> --keyring /etc/webapp-keyring.gpg /etc/sysconfig/rhn/rhn-entitlement-cert.xml-5rMX9X'
Database connectioned initialized: refer to /etc/rhn/rhn.conf
Attempting local RHN Certificate push (and therefore activation)

ERROR: RHN Entitlement Certificate cannot be imported - the versions of current and new certificate do not match, [spacewalk] vs. [None]
If you are trying to upgrade the Satellite server, please see the upgrade documentation located here /etc/sysconfig/rhn/satellite-upgrade/README  (as part of the rhn-upgrade package).  WARNING: If you want to skip this check, please use --ignore-version-mismatch, but doing so may cause issues (including malfunction of the Satellite software).  Only skip the test if instructed to do so by a support technician.
*****

Do you have seen this error before? I’ve created a new certificate and I didn’t know why spacewalk compared with the old one?

Thanks,
Jérôme

From: spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com> [mailto:spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>] On Behalf Of jin&hitman&Barracuda
Sent: Montag, 16. Juli 2018 09:58
To: spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>
Subject: Re: [Spacewalk-list] Your satellite certificate has expired

Hi
I did follow below link and correct my own syntax problems. Finally, I created a new pair of RSA key and sign with them. Now the warning message (Your satellite certificate has expired..) gone.

https://github.com/spacewalkproject/spacewalk/wiki/CertCreation
May be this helps

2018-07-15 16:06 GMT+03:00 jin&hitman&Barracuda <jinhitman at gmail.com<mailto:jinhitman at gmail.com>>:
I have same situation and i found below link. But when i tried, i saw nothing is changed. It could be my fault so can you try below link and tell us if this help ?

https://www.redhat.com/archives/spacewalk-list/2015-August/msg00013.html

On Fri, 13 Jul 2018, 23:51 Ray Butler, <rbutler at workforcesoftware.com<mailto:rbutler at workforcesoftware.com>> wrote:
Noticed this banner on my Spacewalk 2.4 login page today

Your satellite certificate has expired. Please visit the following link for steps on how to request or generate a new certificate: https://access.redhat.com/knowledge/tools/satcert Your satellite enters restricted period in 7 day(s).

Did the usual digging online and I can’t seem to find a copy of spacewalk-public.cert that doesn’t expire on 2018-07-13, even from github with the 2.8 release. Any ideas where I can grab an update certificate or a process that will let me recreate another self-signed certificate?

Thanks,

Ray Butler
Senior Systems Engineer

WorkForce Software |  38705 Seven Mile Road, Livonia, MI 48152

This message is intended exclusively for the individual or entity to which it is addressed. This communication may contain information that is proprietary, privileged, confidential or otherwise legally exempt from disclosure. If you are not the named addressee, or have been inadvertently and erroneously referenced in the address line, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. (ID m031214)
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list

--
There is no place like "/home"
Tuco (Benedicto Pasifico Juan Maria) Ramirez

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://www.redhat.com/mailman/listinfo/spacewalk-list

--
There is no place like "/home"
Tuco (Benedicto Pasifico Juan Maria) Ramirez
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20180716/e06d873a/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5165 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20180716/e06d873a/attachment.p7s>