note that we are using this patch to action_reposync.py:

https://github.com/cobbler/cobbler/pull/1763/files

On 23/01/18 15:13, Gregory Matthews wrote:
Hi...

I'm trying to get cobbler to sync the new RH Oracle Java repo. I have a suitable key/cert pairing that allows me to access the repo and I can create a repo in cobbler with the key, cert and cacert file in the yum options as normal.

when running a reposync, it downloads all of the rpms as expected but then fails to pull the repomd.xml file with an error related to key/sig:

Tue Jan 23 15:08:46 2018 - DEBUG | received on stderr:
Tue Jan 23 15:08:46 2018 - INFO | Exception occured: <class 'cobbler.cexceptions.CX'> Tue Jan 23 15:08:46 2018 - INFO | Exception value: 'urlgrabber failed to fetch metadata from https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_64/oracle-java-rm/os/repodata/repomd.xml (14, \'curl#35 - "Peer reports failure of signature verification or key exchange."\')'
Tue Jan 23 15:08:46 2018 - INFO | Exception Info:
  File "/usr/lib/python2.7/site-packages/cobbler/utils.py", line 106, in die
     raise CX(msg)

If I try to pull that URL from the command line using the certs and key, it works fine. That implies that it is switching to the wrong key/certs or none at all...

we are running 2.8.2.

any clues as to why it works for the rpms but not for the metadata?

thanks

GREG


--
Greg Matthews        01235 778658
Scientific Computing Group Leader
Diamond Light Source Ltd. OXON UK


--
This e-mail and any attachments may contain confidential, copyright and or 
privileged material, and are for the use of the intended addressee only. If you 
are not the intended addressee or an authorised recipient of the addressee 
please notify us of receipt by returning the e-mail and do not use, copy, 
retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and 
Wales with its registered office at Diamond House, Harwell Science and 
Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
_______________________________________________
cobbler mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to