On Monday, January 16, 2012 8:12:57 AM, Michael Mraka wrote: > Christopher J Petrolino wrote: > % Hello, > % > % I am having a heck of a time trying to figure out why I can't register > % clients with my new spacewalk server. Here is what my /var/log/up2date > % says - > % > % > % [Sun Jan 15 23:41:43 2012] rhn_register > % Traceback (most recent call last): > % File "/usr/sbin/rhn_register", line 76, in ? > % app.run() > % File "/usr/share/rhn/up2date_client/rhncli.py", line 75, in run > % sys.exit(self.main() or 0) > % File "/usr/sbin/rhn_register", line 58, in main > % ui.main() > % File "/usr/share/rhn/up2date_client/tui.py", line 1266, in main > % tui.run() > % File "/usr/share/rhn/up2date_client/tui.py", line 1224, in run > % result = win.run() > % File "/usr/share/rhn/up2date_client/tui.py", line 236, in run > % tui_call_wrapper(self.screen, rhnreg.getCaps) > % File "/usr/share/rhn/up2date_client/tui.py", line 86, in tui_call_wrapper > % FatalErrorWindow(screen, e.errmsg) > % exceptions.AttributeError: SSLCertificateVerifyFailedError instance > % has no attribute 'errmsg' > > What's your rhn_register version? > > rpm -qf /usr/bin/rhn_register > > % I *think* I have my ssl certs set correctly on both the client and the > % server. Can anyone give me anyone suggest any troubleshooting tips? > > You can check ssl certificate using > curl --cacert /path/to/your/RHN-ORG-TRUSTED-SSL-CERT > https://<satellite.fqdn>/ > > Regards, > > -- > Michael Mráka > Satellite Engineering, Red Hat > > _______________________________________________ > Spacewalk-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/spacewalk-list
Here are my results to the above SSL Certificate Check in a working environment. I hope this helps someone. #=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= EXAMPLE #1: A successful test connection with curl looks like: NOTE: replace "VALID.SPACEWALK.FQDN" below with your own FQDN to your Spacewalk server. $ curl --cacert /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT https://VALID.SPACEWALK.FQDN/ <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://VALID.SPACEWALK.FQDN/rhn/Login.do";>here</a>.</p> <hr> <address>Apache Server at VALID.SPACEWALK.FQDN Port 443</address> </body></html> #=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= EXAMPLE #2: Testing using a Spacewalk Proxy: If your client is using a Spacewalk Proxy, the output will look like: NOTE: Replace "SPACEWALK.PROXY.FQDN" with your own FQDN to your Spacewalk PROXY server. $ curl --cacert /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT https://SPACEWALK.PROXY.FQDN/ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";> <!-- Id: --> <html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en"> <head> <title>Spacewalk Proxy Server</title> <link rel="shortcut icon" href="_rhn_proxy/favicon.ico" /> <style> <!-- body { font-family: sans; font-size: 90%; background-color: black; } #rhn-proxy-logo { text-align: center; vertical-align: middle; margin-top: 20%; } #content { text-align: center; margin: 2em 25% 0 25%; font-weight: bold; color: #ccc; } #footer { font-size: 70%; font-weight: normal; } a:link { font-weight: bold; text-decoration: none; color: #ccc; } a:visited { font-weight: bold; text-decoration: none; color: #ccc; } a:hover, a:active { font-weight: bold; text-decoration: none; color: #00aad4; } --> </style> </head> <body> <div id="rhn-proxy-logo"> <img src="_rhn_proxy/spacewalk-logo.png" alt="Spacewalk - Management Proxy" /> </div> <div id="content"> <a href="pub/">[pub]</a> <p id="footer">Spacewalk Proxy</p> </div> </body> </html> _______________________________________________ Spacewalk-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/spacewalk-list
