[Spacewalk-list] Spacewalk channel with RHSM repo

Mon Mar 16 13:26:07 UTC 2015

did you set the cert as both the client cert and the key?

On Mon, Mar 16, 2015 at 8:44 AM, Tony Dufour <Tony.Dufour at gemalto.com> wrote:
> Hello Thomas,
>
>
>
> I have no reposync.conf file on my Spacewalk server.
>
> The command I use is : [root at host reposync]# /usr/bin/spacewalk-repo-sync -c
> test_rhn-6-x86_64
>
> Thanks for your help.
>
>
>
> Regards.
>
>
>
> From: spacewalk-list-bounces at redhat.com
> [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Thomas Foster
> Sent: lundi 16 mars 2015 12:48
>
>
> To: spacewalk-list at redhat.com
> Subject: Re: [Spacewalk-list] Spacewalk channel with RHSM repo
>
>
>
> What is your reposync command, can you post your reposync.conf file?
>
> On Mar 16, 2015 4:37 AM, "Tony Dufour" <Tony.Dufour at gemalto.com> wrote:
>
> Hello,
>
>
>
> Waldirio, I have as many subscriptions has needed for my servers. I have “Up
> to 1 guest” for physical servers and “Unlimited guest” for hypervisors which
> a running virtual servers. I enrolled my Spacewalk with a “Up to 1 guest”
> subscription, is there a known difference between subscriptions that may
> result in my issue ?
>
>
>
> Thomas, I checked the url with wget and when editing the “index.html” that I
> get, I can see the “repodata” href in html code. So I guess the url is
> correct ?
>
>
>
> Thank you both for you help,
>
>
>
> Regards,
>
>
>
> Tony
>
>
>
> From: spacewalk-list-bounces at redhat.com
> [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Thomas Foster
> Sent: dimanche 15 mars 2015 12:25
> To: spacewalk-list at redhat.com
> Subject: Re: [Spacewalk-list] Spacewalk channel with RHSM repo
>
>
>
> Check the url and make sure you are not using a url too deep in the path
> where spacewalk cant see the repomd.xml file.  Your url should point to the
> directory before those files.
>
> On Mar 14, 2015 11:01 PM, "Waldirio Manhães Pinheiro" <waldirio at gmail.com>
> wrote:
>
> Hello Tony
>
>
>
> Just to clarify, you have one subscription of RHEL and would like to sync
> RHEL packages to your SW, that's correct ?!
>
>
>
>
>
> Take Care
>
>
> ______________
> Atenciosamente
> Waldirio
> msn: waldirio at gmail.com
> Skype: waldirio
> Site: www.waldirio.com.br
> Blog: blog.waldirio.com.br
>
> LinkedIn: http://br.linkedin.com/pub/waldirio-pinheiro/22/b21/646
> PGP: www.waldirio.com.br/public.html
>
>
>
> On Fri, Mar 13, 2015 at 12:41 PM, Tony Dufour <Tony.Dufour at gemalto.com>
> wrote:
>
> Hello folks,
>
>
>
> I have an issue while setting up a Spacewalk channel based on a Red Hat
> Network repository with mutual auth.
>
> -          I have valid Red Hat subscriptions in my Red Hat account
>
> -          I have registered my Spacewalk 2.2 server, so I was able to
> export its entitlement certificate
>
> -          I imported the entitlement certificate in Spacewalk (System >
> Kickstart > GPG and SSL Keys)
>
> -          I also imported the RHNS CA Certificate in Spacewalk
>
> -          I created a repository in Spacewalk with the following URL :
> https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
>
> -          I configured the repository to use my RHNS CA Cert and
> Entitlement cert
>
> -          I created a channel and linked it to this repository
>
>
>
> Now I try to perform my first “repo-sync” but it fails :
>
>
>
> [root at host reposync]# /usr/bin/spacewalk-repo-sync -c test_rhn-6-x86_64
>
> #### Channel label: test_rhn-6-x86_64 ####
>
> Repo URL:
> https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
>
> ERROR: Cannot retrieve repository metadata (repomd.xml) for repository:
> test_rhn-6-x86_64. Please verify its path and try again
>
> Sync completed.
>
> Total time: 0:00:00
>
>
>
> The repo-sync log file doesn’t help since it only log this standard output.
>
>
>
> I guess that my certificates works since I’m able to reach and authenticate
> on cdn.redhat.com using wget command :
>
>
>
> [root at host ~]# wget
> https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
> --certificate=/tmp/host.pem --ca-certificate=/usr/share/rhn/RHNS-CA-CERT
> --no-check-certificate
>
> --2015-03-13 16:38:51--
> https://cdn.redhat.com/content/dist/rhel/server/6/6Server/x86_64/os/
>
> Resolving proxy.domain.com... 10.54.4.42
>
> Connecting to proxy.domain.com |10.54.4.42|:9091... connected.
>
> WARNING: cannot verify cdn.redhat.com’s certificate, issued by
> “/C=US/ST=North Carolina/O=Red Hat, Inc./OU=Red Hat Network/CN=Red Hat
> Entitlement Operations Authority/emailAddress=ca-support at redhat.com”:
>
>   Self-signed certificate encountered.
>
> Proxy request sent, awaiting response... 200 OK
>
> Length: 767 [text/html]
>
> Saving to: “index.html”
>
>
>
> 100%[===========================================================================================================================>]
> 767         --.-K/s   in 0s
>
>
>
> 2015-03-13 16:38:51 (16.6 MB/s) - “index.html” saved [767/767]
>
>
>
> Anyone can help resolving this repo-sync problem ?
>
>
>
> Thanks anyone for your ideas or suggestions.
>
>
>
> Regards,
>
>
>
> Tony
>
>
>
> ________________________________
>
> This message and any attachments are intended solely for the addressees and
> may contain confidential information. Any unauthorized use or disclosure,
> either whole or partial, is prohibited.
> E-mails are susceptible to alteration. Our company shall not be liable for
> the message if altered, changed or falsified. If you are not the intended
> recipient of this message, please delete it and notify the sender.
> Although all reasonable efforts have been made to keep this transmission
> free from viruses, the sender will not be liable for damages caused by a
> transmitted virus.
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> ________________________________
>
> This message and any attachments are intended solely for the addressees and
> may contain confidential information. Any unauthorized use or disclosure,
> either whole or partial, is prohibited.
> E-mails are susceptible to alteration. Our company shall not be liable for
> the message if altered, changed or falsified. If you are not the intended
> recipient of this message, please delete it and notify the sender.
> Although all reasonable efforts have been made to keep this transmission
> free from viruses, the sender will not be liable for damages caused by a
> transmitted virus.
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> ________________________________
> This message and any attachments are intended solely for the addressees and
> may contain confidential information. Any unauthorized use or disclosure,
> either whole or partial, is prohibited.
> E-mails are susceptible to alteration. Our company shall not be liable for
> the message if altered, changed or falsified. If you are not the intended
> recipient of this message, please delete it and notify the sender.
> Although all reasonable efforts have been made to keep this transmission
> free from viruses, the sender will not be liable for damages caused by a
> transmitted virus.
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list