[Spacewalk-list] Spacewalk 2.8 - Patching RHEL 6/7 Servers

Thu Jul 11 07:46:15 UTC 2019

Hi Lakshmi

Presuming you’ve configured the SSL keys correctly, might be worth noting/checking the following about the baseurl:

Add repository URL with more specific details:

From    https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os
To        https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os

Note that in 7Server the S must be capitalized. Also, substitute x86_64 for $basearch.

[cid:image003.jpg at 01D537C5.18CE0EA0]

Regards
Phil

From: spacewalk-list-bounces at redhat.com <spacewalk-list-bounces at redhat.com> On Behalf Of mandava2020 at gmail.com
Sent: 10 July 2019 22:29
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Spacewalk 2.8 - Patching RHEL 6/7 Servers

Hi All,
I’ve installed Open Spacewalk 2.8 on a RHEL 7 server  and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues

I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution

I have done the below configurations but getting the below errors

1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/

# update-ca-trust
2.
Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the
SSL Client Key.  In the redhat.repo file you'll see something like this:

sslcacert = /etc/rhsm/ca/redhat-uep.pem  (the RHEL CA Signing SSL certificate)
sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem  (RHEL Client Key SSL certificate)
sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate)

The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key.   I created my keys with these names:

RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement.  For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field

3. Created Redhat 7.6 channel in spacewalk wegUI
For GPG Key ID: FD431D51, and GPG key fingerprint:  567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51
baseurl: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
and
in the repository selected CA signing, RHEL client key and rhel entitlement

4.
{root at spacewalk}-{/etc/yum.repos.d}<mailto:%7broot at spacewalk%7d-%7b/etc/yum.repos.d%7d> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum
22:37:57 ======================================
22:37:57 | Channel: linux7-x86_64
22:37:57 ======================================
22:37:57 Sync of channel started.
22:37:57
22:37:57   Processing repository with URL: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try.
https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"
22:37:59 Sync of channel completed in 0:00:01.
22:37:59 Total time: 0:00:01

Please help on this issue.

Thanks,
Lakshmi Mandava

On Wed, Jul 3, 2019 at 11:21 PM Lakshmi Narayana <mandava2020 at gmail.com<mailto:mandava2020 at gmail.com>> wrote:
Hi All,
I’ve installed Open Spacewalk 2.8 on a RHEL 7 server  and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues

I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution

I have done the below configurations but getting the below errors

1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/

# update-ca-trust
2.
Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the
SSL Client Key.  In the redhat.repo file you'll see something like this:

sslcacert = /etc/rhsm/ca/redhat-uep.pem  (the RHEL CA Signing SSL certificate)
sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem  (RHEL Client Key SSL certificate)
sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate)

The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key.   I created my keys with these names:

RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement.  For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field

3. Created Redhat 7.6 channel in spacewalk wegUI
For GPG Key ID: FD431D51, and GPG key fingerprint:  567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51
baseurl: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
and
in the repository selected CA signing, RHEL client key and rhel entitlement

4.
{root at spacewalk}-{/etc/yum.repos.d}<mailto:%7broot at spacewalk%7d-%7b/etc/yum.repos.d%7d> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum
22:37:57 ======================================
22:37:57 | Channel: linux7-x86_64
22:37:57 ======================================
22:37:57 Sync of channel started.
22:37:57
22:37:57   Processing repository with URL: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try.
https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"
22:37:59 Sync of channel completed in 0:00:01.
22:37:59 Total time: 0:00:01

Please help on this issue.

Thanks,
Lakshmi Mandava
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20190711/7f841a94/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 16682 bytes
Desc: image003.jpg
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20190711/7f841a94/attachment.jpg>