[Spacewalk-list] Spacewalk 0.8.36-1 , generate CA certificate fails

Bushby, Bruce (London)(c) bbushby at maninvestments.com
Tue Jan 26 15:52:55 UTC 2010 

I forgot to add the contents of /var/log/rhn/rhn-installation.log


[root at localhost ~]#
[root at localhost ~]# cat /var/log/rhn/rhn-installation.log
Installation log of Spacewalk
Command: /usr/bin/spacewalk-setup

gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: key F24F1B08: public key "Red Hat, Inc (Red Hat Network) <rhn-feedback at redhat.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
disconnected
/etc/sysconfig/rhn-satellite-prep/etc/rhn/cluster.ini
/etc/sysconfig/rhn-satellite-prep/etc/rhn/rhn.conf.orig
/etc/sysconfig/rhn-satellite-prep/etc/rhn/rhn.conf
/etc/sysconfig/rhn-satellite-prep/etc/tomcat5/server.xml
/etc/sysconfig/rhn-satellite-prep/etc/tomcat5/tomcat5.conf
/etc/sysconfig/rhn-satellite-prep/etc -> /etc
/etc/sysconfig/rhn-satellite-prep/etc/rhn -> /etc/rhn
/etc/sysconfig/rhn-satellite-prep/etc/rhn/cluster.ini -> /etc/rhn/cluster.ini
/etc/sysconfig/rhn-satellite-prep/etc/rhn/rhn.conf.orig -> /etc/rhn/rhn.conf.orig
/etc/sysconfig/rhn-satellite-prep/etc/rhn/rhn.conf -> /etc/rhn/rhn.conf
 * Making backup of /etc/rhn/rhn.conf to /etc/sysconfig/rhn/backup-2010-01-26-15:29/etc/rhn/rhn.conf
/etc/sysconfig/rhn-satellite-prep/etc/tomcat5 -> /etc/tomcat5
/etc/sysconfig/rhn-satellite-prep/etc/tomcat5/server.xml -> /etc/tomcat5/server.xml
 * Making backup of /etc/tomcat5/server.xml to /etc/sysconfig/rhn/backup-2010-01-26-15:29/etc/tomcat5/server.xml
/etc/sysconfig/rhn-satellite-prep/etc/tomcat5/tomcat5.conf -> /etc/tomcat5/tomcat5.conf
 * Making backup of /etc/tomcat5/tomcat5.conf to /etc/sysconfig/rhn/backup-2010-01-26-15:29/etc/tomcat5/tomcat5.conf
Unsubstituted Tags:

ERROR: unhandled exception occurred:
Generating private CA key: /root/ssl-build/RHN-ORG-PRIVATE-SSL-KEY
Traceback (most recent call last):
  File "/usr/bin/rhn-ssl-tool", line 58, in <module>
    sys.exit(mod.main() or 0)
  File "/usr/share/rhn/certs/rhn_ssl_tool.py", line 1229, in main
    ret = _main() or 0
  File "/usr/share/rhn/certs/rhn_ssl_tool.py", line 1172, in _main
    options.verbose, options.force)
  File "/usr/share/rhn/certs/rhn_ssl_tool.py", line 273, in genPrivateCaKey
    ret, out_stream, err_stream = rhn_popen(args % repr(password))
  File "/usr/lib/python2.6/site-packages/spacewalk/common/fileutils.py", line 213, in rhn_popen
    stdout=subprocess.PIPE, stderr=subprocess.PIPE, close_fds=True)
  File "/usr/lib64/python2.6/subprocess.py", line 595, in __init__
    errread, errwrite)
  File "/usr/lib64/python2.6/subprocess.py", line 1092, in _execute_child
    raise child_exception
OSError: [Errno 2] No such file or directory


 

-----Original Message-----
From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Bushby, Bruce (London)(c)
Sent: 26 January 2010 15:45
To: spacewalk-list at redhat.com
Subject: [Spacewalk-list] Spacewalk 0.8.36-1 , generate CA certificate fails


Thanks Michael, much appreciated!

I've run into another issue, the setup script is unable to generate the CA certificate, towards the end of the script it fails with:
"Could not generate CA certificate.  Exit value: 1."

I used a clean install of Fedora 12 and the http://miroslav.suchy.cz/spacewalk/nightly-candidate-f12/$basearch/os/  repo.

[root at localhost ~]#
[root at localhost ~]# spacewalk-setup --disconnect
* Setting up Oracle environment.
* Setting up database.
** Database: Setting up database connection.
DB User? spacewalk
DB Password?
DB SID? xe
DB hostname? localhost
DB port [1521]?
DB protocol [TCP]?
** Database: Testing database connection.
** Database: Populating database.
*** Progress: ###########################################################
* Setting up users and groups.
** GPG: Initializing GPG and importing key.
** GPG: Creating /root/.gnupg directory
You must enter an email address.
Admin Email Address? admin at xxxxxxxx.com
* Performing initial configuration.
* Activating Spacewalk.
** Loading Spacewalk Certificate.
** Verifying certificate locally.
** Activating Spacewalk.
* Enabling Monitoring.
* Configuring apache SSL virtual host.
Should setup configure apache's default ssl server for you (saves original ssl.conf) [Y]? Y
** /etc/httpd/conf.d/ssl.conf has been backed up to ssl.conf-swsave
* Configuring jabberd.
* Creating SSL certificates.
CA certificate password?
Re-enter CA certificate password?
Organization? Xxxx xxxx
Organization Unit [localhost.localdomain]? Unix Engineering Email Address [admin at xxxxxxx.com]?
City? London
State? London
Country code (Examples: "US", "JP", "IN", or type "?" to see a list)? GB
** SSL: Generating CA certificate.
Could not generate CA certificate.  Exit value: 1.
Please examine /var/log/rhn/rhn-installation.log for more information.
[root at localhost ~]# 

-----Original Message-----
From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Michael Mraka
Sent: 22 January 2010 23:00
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Spacwalk 0.7[Fedora 12] & Spacewalk 0.8.35

Bushby, Bruce (London)(c) wrote:
% Hi
%
% I've been struggling for the past few days to install spacewalk 0.7 on % fedora 12 x64.
...
% The above error is a known bug and has been fixed in a "commit"......not % knowing how to collect/apply a commit I decided to give the nightly repo % a go.
%
% For the nightly I did a "default" install of fedora 12, followed the how % to notes and installed "spacewalk-nightly"....everything went exactly as % the % howto notes explained....however when I tried to run satellite-setup is % fails trying to validate the satellite certificate. (I did not try and % generate my own cert) % % % [root at spacewalk rhn]# spacewalk-setup --disconnected ...
% ** Verifying certificate locally.
% There was a problem validating the satellite certificate: 1

Hi Bruce,

certificate verification failure should be fixed in spacewalk-backend-0.8.36-1.

Was my fault. :-/

--
Michael Mráka
Satellite Engineering, Red Hat

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

**********************************************************************
 Please consider the environment before printing this email or its attachments.
The contents of this email are for the named addressees only.  It contains information which may be confidential and privileged.  If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not otherwise disclose or use them. Email transmission is not a secure method of communication and Man Investments cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man Investments makes every effort to keep its network free from viruses, it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment instruments or to perform other such transactions of any kind. Man Investments reserves the right to monitor, record and retain all electronic communications through its network to ensure the integrity of its systems, for record keeping and regulatory purposes. 
Visit us at: www.maninvestments.com
TG0908
**********************************************************************


_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-list

More information about the Spacewalk-list mailing list