> looking into this more it appears to be an SSL error of somekind but > is slightly odd in that RHEL5 clients do not suffer the same issue > only RHEL6 as if i use http rather than https in the up2date config it > works fine for RHEL6. > > perhaps what complicates this slightly is that my proxies are in HA > pairs meaning only 1 takes traffic at a time and the one that is > active is the one that holds the VIP, where the VIP and the proxy > services are controlled using heartbeat. The VIP address is what is in > up2date config and this has never been an issue until RHEL6. The cert > that is used on the proxies has the FQDN of the spacewalk server and > not the FQDN of the proxy VIP but registrations and https api calls > through the proxy work just fine so i am slightly stumped. > > for RHEL5 clients, that work just fine, i see the following in the > ssl_request_log of the proxy > > [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 126 > [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 906 > [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 1093 > [23/Dec/2010:22:29:32 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA "GET > /XMLRPC/GET-REQ/rhel-5-x86_64-01122010/repodata/repomd.xml HTTP/1.1" > 871 > > for a RHEL6 client that fails i get the following > > [23/Dec/2010:22:27:55 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 905 > [23/Dec/2010:22:27:55 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 1087 > [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 905 > [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 905 > [23/Dec/2010:22:27:57 +0000] xx.xx.xx.xx TLSv1 DHE-RSA-AES256-SHA > "POST /XMLRPC HTTP/1.1" 905 > > so as you can see the GET for the repomd.xml never happens, and the > client reports > > Error: Cannot retrieve repository metadata (repomd.xml) for > repository: rhel-6-x86_64-01122010. Please verify its path and try > again > > anyone have any clues as to how i can debug this further?
resolved - it was an OU/CN issues based on the fact that we HA the proxies but odd that RHEL5 does not complain. _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
