[Spacewalk-list] Problem registering Debian wheezy clients?

[Michel Alexandre Salim]

Odd, another machine on the same network can be registered just fine.
Will double check though, thanks!

Regards,

-- 
Michel

On 04/14/2014 10:38 AM, BERGMAN Andrew wrote:
> Sounds like you are behind a proxy server that is mangling the SSL certs somehow.
> 
> Either put rules in your proxy to allow direct access to these hosts or don't use SSL.
> 
> Regards
> 
> Andrew
> 
> -----Original Message-----
> From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Michel Alexandre Salim
> Sent: Monday, 14 April 2014 1:16 PM
> To: spacewalk-list at redhat.com
> Subject: [Spacewalk-list] Problem registering Debian wheezy clients?
> 
> Hello,
> 
> We're interested in using Spacewalk to manage our Debian servers (mostly Proxmox virtualization servers), and encountered the following problem:
> 
> - attempting to use rhnreg_ks results in the following error:
> An error has occurred:
> The certificate /usr/share/rhn/RHNS-CA-CERT is expired. Please ensure you have the correct certificate and your system time is correct.
> 
> - on examination that file contains two certificates, the first one has indeed expired but the second one is still valid:
> 
> # grep After /usr/share/rhn/RHNS-CA-CERT.orig
>             Not After : Aug 26 02:10:55 2013 GMT
>             Not After : Feb 24 21:07:08 2020 GMT
> 
> - removing the expired certificate so the file contains only the one expiring in 2020, I get the following error:
> 
> The SSL certificate failed verification.
> See /var/log/up2date for more information
> 
> This might be similar to the problem reported here (for EL5)
> https://access.redhat.com/site/solutions/725153
> 
> but we don't have access to that. I'm suspecting it's a problem with the old version of RHN* tools available in Debian:
> 
> https://packages.debian.org/search?keywords=rhn-client-tools
> 
> only 1.8.9 is available, whereas on my Fedora laptop I'm on 2.1.16
> 
> Is there a test repo available for Debian users to test? I'd rather not have to rebuild packages myself.
> 
> Thanks in advance,
> 
> --
> Michel Alexandre Salim
> Information Systems Manager
> CERGIS NETWORKS
> PT. Centra Global Investama
> 
> 
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________
> 
> Disclaimer : The contents of this e-mail including any attachments are intended only for the person or entity to which this e-mail is addressed and may contain confidential, privileged and/or commercially sensitive material. If you are not, or believe you may not be, the intended recipient, please advise the sender immediately by return e-mail, delete this e-mail and destroy any copies.
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> For more information please visit http://www.symanteccloud.com
> ______________________________________________________________________
> 
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> 

-- 
Michel Alexandre Salim (Michael)
Information Systems Manager
CERGIS NETWORKS
PT. Centra Global Investama