<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="GENERATOR" content="MSHTML 8.00.7601.17573">
<style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
</head>
<body fPStyle="1" ocsi="0">
<div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000; FONT-SIZE: 13px">
<div>I tried not to post this to the list as I thought I had it resolved, but I've hit a brick wall.</div>
<div> </div>
<div>I've got a spacewalk 1.4 server on Centos 5.6 64bit with Oracle XE backend.</div>
<div> </div>
<div>I had a mild DNS problem (see my prevous post to the list) which to resovle I had to change the SSL certificate on the spacwalk server to be the FQDN.</div>
<div> </div>
<div>This resolved my problem, builds started registering again and could use the spacewalk server for updates etc.</div>
<div> </div>
<div>I continued to tune/tweak some parts of the kickstart builds, nothing on the spacewalk server, just the builds and now the kickstart builds are not registering witht he server.</div>
<div> </div>
<div>When I do a rhn_register on a client I get told it's failed and I should look in the up2date log.</div>
<div> </div>
<div>The up2date log shows a large python backtrace</div>
<div> </div>
<div>
<div class="text">
<ol>
<li class="li1">
<div class="de1">[Tue May 24 13:12:38 2011] up2date </div>
</li><li class="li2">
<div class="de2">Traceback (most recent call last):</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhnreg_ks", line 213, in ?</div>
</li><li class="li2">
<div class="de2"> cli.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhncli.py", line 74, in run</div>
</li><li class="li2">
<div class="de2"> sys.exit(self.main() or 0)</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhnreg_ks", line 90, in main</div>
</li><li class="li2">
<div class="de2"> rhnreg.getCaps()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhnreg.py", line 231, in getCaps</div>
</li><li class="li2">
<div class="de2"> s.capabilities.validate()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhnserver.py", line 156, in __get_capabilities</div>
</li><li class="li2">
<div class="de2"> self.registration.welcome_message()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhnserver.py", line 64, in __call__</div>
</li><li class="li2">
<div class="de2"> raise up2dateErrors.SSLCertificateVerifyFailedError()</div>
</li><li class="li1">
<div class="de1">up2date_client.up2dateErrors.SSLCertificateVerifyFailedError: The SSL certificate /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT failed verification.</div>
</li><li class="li2">
<div class="de2"> </div>
</li><li class="li1">
<div class="de1">[Tue May 24 13:18:40 2011] rhn_register </div>
</li><li class="li2">
<div class="de2">Traceback (most recent call last):</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 76, in ?</div>
</li><li class="li2">
<div class="de2"> app.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhncli.py", line 74, in run</div>
</li><li class="li2">
<div class="de2"> sys.exit(self.main() or 0)</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 58, in main</div>
</li><li class="li2">
<div class="de2"> ui.main()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1263, in main</div>
</li><li class="li2">
<div class="de2"> tui.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1221, in run</div>
</li><li class="li2">
<div class="de2"> result = win.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 236, in run</div>
</li><li class="li2">
<div class="de2"> tui_call_wrapper(self.screen, rhnreg.getCaps)</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 86, in tui_call_wrapper</div>
</li><li class="li2">
<div class="de2"> FatalErrorWindow(screen, e.errmsg)</div>
</li><li class="li1">
<div class="de1">exceptions.AttributeError: SSLCertificateVerifyFailedError instance has no attribute 'errmsg'</div>
</li><li class="li2">
<div class="de2"> </div>
</li><li class="li1">
<div class="de1">[Tue May 24 13:25:19 2011] rhn_register </div>
</li><li class="li2">
<div class="de2">Traceback (most recent call last):</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 76, in ?</div>
</li><li class="li2">
<div class="de2"> app.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhncli.py", line 74, in run</div>
</li><li class="li2">
<div class="de2"> sys.exit(self.main() or 0)</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 58, in main</div>
</li><li class="li2">
<div class="de2"> ui.main()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1263, in main</div>
</li><li class="li2">
<div class="de2"> tui.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1221, in run</div>
</li><li class="li2">
<div class="de2"> result = win.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 236, in run</div>
</li><li class="li2">
<div class="de2"> tui_call_wrapper(self.screen, rhnreg.getCaps)</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 86, in tui_call_wrapper</div>
</li><li class="li2">
<div class="de2"> FatalErrorWindow(screen, e.errmsg)</div>
</li><li class="li1">
<div class="de1">exceptions.AttributeError: SSLCertificateVerifyFailedError instance has no attribute 'errmsg'</div>
</li><li class="li2">
<div class="de2"> </div>
</li><li class="li1">
<div class="de1">[Tue May 24 13:28:23 2011] rhn_register </div>
</li><li class="li2">
<div class="de2">Traceback (most recent call last):</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 76, in ?</div>
</li><li class="li2">
<div class="de2"> app.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/rhncli.py", line 74, in run</div>
</li><li class="li2">
<div class="de2"> sys.exit(self.main() or 0)</div>
</li><li class="li1">
<div class="de1"> File "/usr/sbin/rhn_register", line 58, in main</div>
</li><li class="li2">
<div class="de2"> ui.main()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1263, in main</div>
</li><li class="li2">
<div class="de2"> tui.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 1221, in run</div>
</li><li class="li2">
<div class="de2"> result = win.run()</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 236, in run</div>
</li><li class="li2">
<div class="de2"> tui_call_wrapper(self.screen, rhnreg.getCaps)</div>
</li><li class="li1">
<div class="de1"> File "/usr/share/rhn/up2date_client/tui.py", line 86, in tui_call_wrapper</div>
</li><li class="li2">
<div class="de2"> FatalErrorWindow(screen, e.errmsg)</div>
</li><li class="li1">
<div class="de1">exceptions.AttributeError: SSLCertificateVerifyFailedError instance has no attribute 'errmsg'</div>
</li></ol>
</div>
<p class="de1">I can see the problem is a failure with the SSL certificate at registration time</p>
<p class="de1"> </p>
<p class="de1">if I look in /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT on the CLIENT machine the certificate is exactly the same as the one on the spacewalk machine</p>
<p class="de1"> </p>
<p class="de1">[root@spacewalk01 auth]# ls -la /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT<br>
-rw-r--r-- 1 root root 5467 May 24 11:23 /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT<br>
</p>
<p class="de1">[root@vmbuild01 rhn]# ls -la RHN-ORG-TRUSTED-SSL-CERT<br>
-rw-r--r-- 1 root root 5467 May 24 11:29 RHN-ORG-TRUSTED-SSL-CERT<br>
</p>
<p class="de1"> </p>
<p class="de1">any suggestions as to what would cause this would be most welcome as I had a working spacewalk machine and I can't figure out what I've done to break this.</p>
<p class="de1"> </p>
<p class="de1">Thanks</p>
<p class="de1"> </p>
<p class="de1">Matt</p>
<p class="de1"> </p>
<p class="de1"> </p>
</div>
</div>
<BR>
______________________________________________________________________<BR>
This email has been scanned by the MessageLabs Email Security System.<BR>
For more information please visit http://www.messagelabs.com/email <BR>
______________________________________________________________________<BR>
</body>
</html>