[Spacewalk-list] Error: Cannot retrieve repository metadata (repomd.xml) for repository

[Tom Brown]

> looking into this more it appears to be an SSL error of somekind but
> is slightly odd in that RHEL5 clients do not suffer the same issue
> only RHEL6 as if i use http rather than https in the up2date config it
> works fine for RHEL6.
>
> perhaps what complicates this slightly is that my proxies are in HA
> pairs meaning only 1 takes traffic at a time and the one that is
> active is the one that holds the VIP, where the VIP and the proxy
> services are controlled using heartbeat. The VIP address is what is in
> up2date config and this has never been an issue until RHEL6. The cert
> that is used on the proxies has the FQDN of the spacewalk server and
> not the FQDN of the proxy VIP but registrations and https api calls
> through the proxy work just fine so i am slightly stumped.
>
> for RHEL5 clients, that work just fine, i see the following in the
> ssl_request_log of the proxy
>
> [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 126
> [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 906
> [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 1093
> [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA "GET
> /XMLRPC/GET-REQ/rhel-5-x86_64-01122010/repodata/repomd.xml HTTP/1.1"
> 871
>
> for a RHEL6 client that fails i get the following
>
> [23/Dec/2010:22:27:55 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 905
> [23/Dec/2010:22:27:55 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 1087
> [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 905
> [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 905
> [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA
> "POST /XMLRPC HTTP/1.1" 905
>
> so as you can see the GET for the repomd.xml never happens, and the
> client reports
>
> Error: Cannot retrieve repository metadata (repomd.xml) for
> repository: rhel-6-x86_64-01122010. Please verify its path and try
> again
>
> anyone have any clues as to how i can debug this further?

resolved - it was an OU/CN issues based on the fact that we HA the
proxies but odd that RHEL5 does not complain.