[Spacewalk-list] Spacewalk channel with RHSM repo

Tony Dufour Tony.Dufour at gemalto.com
Fri Mar 13 15:41:57 UTC 2015


Hello folks,

I have an issue while setting up a Spacewalk channel based on a Red Hat Network repository with mutual auth.

-          I have valid Red Hat subscriptions in my Red Hat account

-          I have registered my Spacewalk 2.2 server, so I was able to export its entitlement certificate

-          I imported the entitlement certificate in Spacewalk (System > Kickstart > GPG and SSL Keys)

-          I also imported the RHNS CA Certificate in Spacewalk

-          I created a repository in Spacewalk with the following URL : https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/

-          I configured the repository to use my RHNS CA Cert and Entitlement cert

-          I created a channel and linked it to this repository

Now I try to perform my first "repo-sync" but it fails :

[root at host reposync]# /usr/bin/spacewalk-repo-sync -c test_rhn-6-x86_64
#### Channel label: test_rhn-6-x86_64 ####
Repo URL: https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
ERROR: Cannot retrieve repository metadata (repomd.xml) for repository: test_rhn-6-x86_64. Please verify its path and try again
Sync completed.
Total time: 0:00:00

The repo-sync log file doesn't help since it only log this standard output.

I guess that my certificates works since I'm able to reach and authenticate on cdn.redhat.com using wget command :

[root at host ~]# wget https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/ --certificate=/tmp/host.pem --ca-certificate=/usr/share/rhn/RHNS-CA-CERT --no-check-certificate
--2015-03-13 16:38:51--  https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
Resolving proxy.domain.com... 10.54.4.42
Connecting to proxy.domain.com |10.54.4.42|:9091... connected.
WARNING: cannot verify cdn.redhat.com's certificate, issued by "/C=US/ST=North Carolina/O=Red Hat, Inc./OU=Red Hat Network/CN=Red Hat Entitlement Operations Authority/emailAddress=ca-support at redhat.com":
  Self-signed certificate encountered.
Proxy request sent, awaiting response... 200 OK
Length: 767 [text/html]
Saving to: "index.html"

100%[===========================================================================================================================>] 767         --.-K/s   in 0s

2015-03-13 16:38:51 (16.6 MB/s) - "index.html" saved [767/767]

Anyone can help resolving this repo-sync problem ?

Thanks anyone for your ideas or suggestions.

Regards,

Tony

________________________________
This message and any attachments are intended solely for the addressees and may contain confidential information. Any unauthorized use or disclosure, either whole or partial, is prohibited.
E-mails are susceptible to alteration. Our company shall not be liable for the message if altered, changed or falsified. If you are not the intended recipient of this message, please delete it and notify the sender.
Although all reasonable efforts have been made to keep this transmission free from viruses, the sender will not be liable for damages caused by a transmitted virus.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20150313/adc9fa3c/attachment.htm>


More information about the Spacewalk-list mailing list