<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-GB" link="blue" vlink="purple"> <div class="WordSection1"> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hi Lakshmi<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Presuming you’ve configured the SSL keys correctly, might be worth noting/checking the following about the baseurl:<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Add repository URL with more specific details:<o:p></o:p></span></pre> <pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></pre> <p class="MsoNormal">From<span style="color:#1F497D"> </span><a href="https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os">https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os</a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p></o:p></span></p> <p class="MsoNormal">To<span style="color:#1F497D"> </span><a href="https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os">https://cdn.redhat.com/content/dist/rhel/server/7/7<b>S</b>erver/x86_64/os</a><span style="color:#1F497D"><o:p></o:p></span></p> <pre><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></pre> <p class="MsoNormal">Note that in 7Server the <b>S</b> must be capitalized. Also, substitute x86_64 for $basearch.<o:p></o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><img border="0" width="601" height="326" style="width:6.2604in;height:3.3958in" id="Picture_x0020_1" src="cid:image003.jpg@01D537C5.18CE0EA0"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p></o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Regards<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Phil<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> spacewalk-list-bounces@redhat.com <spacewalk-list-bounces@redhat.com> <b>On Behalf Of </b>mandava2020@gmail.com<br> <b>Sent:</b> 10 July 2019 22:29<br> <b>To:</b> spacewalk-list@redhat.com<br> <b>Subject:</b> Re: [Spacewalk-list] Spacewalk 2.8 - Patching RHEL 6/7 Servers<o:p></o:p></span></p> <p class="MsoNormal"><o:p> </o:p></p> <div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <div> <p class="MsoNormal">Hi All,<o:p></o:p></p> </div> <div> <p class="MsoNormal">I’ve installed Open Spacewalk 2.8 on a RHEL 7 server and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution <o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">I have done the below configurations but getting the below errors<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/<o:p></o:p></p> </div> <p class="MsoNormal"><br> # update-ca-trust<o:p></o:p></p> <div> <p class="MsoNormal">2. <o:p></o:p></p> </div> <div> <p class="MsoNormal">Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the <br> SSL Client Key. In the redhat.repo file you'll see something like this:<br> <br> sslcacert = /etc/rhsm/ca/redhat-uep.pem (the RHEL CA Signing SSL certificate)<br> sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem (RHEL Client Key SSL certificate)<br> sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate)<br> <br> The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key. I created my keys with these names:<br> <br> RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement. For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">3. Created Redhat 7.6 channel in spacewalk wegUI<o:p></o:p></p> </div> <div> <p class="MsoNormal">For GPG Key ID: FD431D51, and GPG key fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51<o:p></o:p></p> </div> <div> <p class="MsoNormal">baseurl: <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os" target="_blank">https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os</a><o:p></o:p></p> </div> <div> <p class="MsoNormal">and <o:p></o:p></p> </div> <div> <p class="MsoNormal">in the repository selected CA signing, RHEL client key and rhel entitlement <o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">4. <o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="mailto:%7broot@spacewalk%7d-%7b/etc/yum.repos.d%7d">{root@spacewalk}-{/etc/yum.repos.d}</a> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum<br> 22:37:57 ======================================<br> 22:37:57 | Channel: linux7-x86_64<br> 22:37:57 ======================================<br> 22:37:57 Sync of channel started.<br> 22:37:57<br> 22:37:57 Processing repository with URL: <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os" target="_blank">https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os</a><br> 22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try.<br> <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml" target="_blank">https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml</a>: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"<br> 22:37:59 Sync of channel completed in 0:00:01.<br> 22:37:59 Total time: 0:00:01<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Please help on this issue.<o:p></o:p></p> </div> </div> <p class="MsoNormal"><br clear="all"> <o:p></o:p></p> <div> <div> <div> <p class="MsoNormal">Thanks,<o:p></o:p></p> <div> <p class="MsoNormal">Lakshmi Mandava<o:p></o:p></p> </div> </div> </div> </div> <p class="MsoNormal"><o:p> </o:p></p> </div> <p class="MsoNormal"><o:p> </o:p></p> <div> <div> <p class="MsoNormal">On Wed, Jul 3, 2019 at 11:21 PM Lakshmi Narayana <<a href="mailto:mandava2020@gmail.com">mandava2020@gmail.com</a>> wrote:<o:p></o:p></p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"> <div> <div> <p class="MsoNormal">Hi All,<o:p></o:p></p> </div> <div> <p class="MsoNormal">I’ve installed Open Spacewalk 2.8 on a RHEL 7 server and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution <o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">I have done the below configurations but getting the below errors<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/<o:p></o:p></p> </div> <p class="MsoNormal"><br> # update-ca-trust<o:p></o:p></p> <div> <p class="MsoNormal">2. <o:p></o:p></p> </div> <div> <p class="MsoNormal">Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the <br> SSL Client Key. In the redhat.repo file you'll see something like this:<br> <br> sslcacert = /etc/rhsm/ca/redhat-uep.pem (the RHEL CA Signing SSL certificate)<br> sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem (RHEL Client Key SSL certificate)<br> sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate)<br> <br> The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key. I created my keys with these names:<br> <br> RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement. For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">3. Created Redhat 7.6 channel in spacewalk wegUI<o:p></o:p></p> </div> <div> <p class="MsoNormal">For GPG Key ID: FD431D51, and GPG key fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51<o:p></o:p></p> </div> <div> <p class="MsoNormal">baseurl: <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os" target="_blank">https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os</a><o:p></o:p></p> </div> <div> <p class="MsoNormal">and <o:p></o:p></p> </div> <div> <p class="MsoNormal">in the repository selected CA signing, RHEL client key and rhel entitlement <o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">4. <o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="mailto:%7broot@spacewalk%7d-%7b/etc/yum.repos.d%7d">{root@spacewalk}-{/etc/yum.repos.d}</a> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum<br> 22:37:57 ======================================<br> 22:37:57 | Channel: linux7-x86_64<br> 22:37:57 ======================================<br> 22:37:57 Sync of channel started.<br> 22:37:57<br> 22:37:57 Processing repository with URL: <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os" target="_blank"> https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os</a><br> 22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try.<br> <a href="https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml" target="_blank">https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml</a>: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"<br> 22:37:59 Sync of channel completed in 0:00:01.<br> 22:37:59 Total time: 0:00:01<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Please help on this issue.<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <div> <div> <div> <p class="MsoNormal">Thanks,<o:p></o:p></p> <div> <p class="MsoNormal">Lakshmi Mandava<o:p></o:p></p> </div> </div> </div> </div> </div> </div> </blockquote> </div> </div> </body> </html>