[Spacewalk-list] Recent httpd/mod_ssl Update break Proxy (2.5) no delivery of repomd etc. to clients (Known Error??) (Used Solution)

[Matthias Gruber]

Hi!

for the "books"

I used following sollution:

#cd /etc/httpd/conf.d
#vi aa-spacewalk-25-client-fix.conf

and inserted:
#
# Workaround to deal with older (yum|dnf)-rhn-plugin issue where the 
plugin sends
# mildly-malformed HTTP headers, in a way that strict RFC compliance 
rejects with
# a 400 (See bz1427625)
#
# If httpd is more recent than 2.4.25, it a) has 
strict-whitespace-enforcement enabled,
# and b) has an option available to relax the restriction. We do so, so 
that spacewalk
# clients that have not had their yum|dnf-rhn-plugin updated, can still 
call home.
#
<IfVersion >= 2.4.25>
  HttpProtocolOptions unsafe
</IfVersion>
#
# Some platforms backported the strict-whitespace-enforcement without 
updating to 2.4.25.
# RHEL added a define to check in this case, _RH_HAS_HTTPPROTOCOLOPTIONS
#
# If an httpd version does NOT have _RH_HAS_HTTPPROTOCOLOPTIONS defined, 
then the
# option is ignored. If it IS defined, relax the constraints by default
#
<IfDefine _RH_HAS_HTTPPROTOCOLOPTIONS>
  HTTPProtocolOptions unsafe
</IfDefine>
#
# In either case, this setting can be removed only if a) one is certain 
that every ISO
# and kickstart-tree in use in the spacewalk-server is not (or at least no 
longer) affected
# by the problem with the plugin, and b) all existing clients have been 
updated to the
# fixed version of the plugin, as found in 
f53a791847105cf422f9fbb41dcb41eeb018c6be
#
# yum-rhn-plugin fixed in versions:
# RHEL5  : UNAFFECTED
# RHEL6  : yum-rhn-plugin-0.9.1-61-el6
# RHEL7  : yum-rhn-plugin-2.0.1-7-el7
# FEDORA : yum-rhn-plugin-2.7.1-1
#
# dnf-rhn-plugin fixed in versions:
# RHEL5  : N/A
# RHEL6  : N/A
# RHEL7  : N/A
# FEDORA : dnf-plugin-spacewalk-2.7.4-1
#
 

Persönlich haftende Gesellschafter: Harald Illy, Michael Klaus, Friedrich von Metzler, Emmerich Müller, Gerhard Wiesheu
Vorsitzender des Aufsichtsrates: Dr. Christoph Schücking
Sitz der Gesellschaft: Frankfurt am Main, Handelsregisternummer: HRB 27 515

Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfänger sein, so bitten wir Sie höflich, dies unverzüglich dem Absender mitzuteilen und die Nachricht zu löschen. Es ist unzulässig, die Nachricht unbefugt weiterzuleiten oder zu kopieren. Da wir nicht die Echtheit oder Vollständigkeit der in dieser Nachricht enthaltenen Informationen garantieren oder zusichern können, sind die vorstehenden Ausführungen rechtlich nicht bindend. Eine Haftung hierfür wird ausgeschlossen.
This message is confidential. If you are not the intended recipient, we kindly ask you to inform the sender and delete the information. Any unauthorised dissemination or copying hereof is prohibited. As we cannot guarantee or assure the genuineness or completeness of the information contained in this message, the statements set forth above are not legally binding. Accordingly we cannot accept any liability for their contents.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20170816/cb605ad9/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20170816/cb605ad9/attachment.sig>