Hi Lakshmi Presuming you’ve configured the SSL keys correctly, might be worth noting/checking the following about the baseurl:
Add repository URL with more specific details: From https://cdn.redhat.com/content/dist/rhel/server/7/$releasever/$basearch/os To https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os Note that in 7Server the S must be capitalized. Also, substitute x86_64 for $basearch. [cid:image003.jpg@01D537C5.18CE0EA0] Regards Phil From: spacewalk-list-boun...@redhat.com <spacewalk-list-boun...@redhat.com> On Behalf Of mandava2...@gmail.com Sent: 10 July 2019 22:29 To: spacewalk-list@redhat.com Subject: Re: [Spacewalk-list] Spacewalk 2.8 - Patching RHEL 6/7 Servers Hi All, I’ve installed Open Spacewalk 2.8 on a RHEL 7 server and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution I have done the below configurations but getting the below errors 1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/ # update-ca-trust 2. Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the SSL Client Key. In the redhat.repo file you'll see something like this: sslcacert = /etc/rhsm/ca/redhat-uep.pem (the RHEL CA Signing SSL certificate) sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem (RHEL Client Key SSL certificate) sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate) The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key. I created my keys with these names: RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement. For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field 3. Created Redhat 7.6 channel in spacewalk wegUI For GPG Key ID: FD431D51, and GPG key fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51 baseurl: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os and in the repository selected CA signing, RHEL client key and rhel entitlement 4. {root@spacewalk}-{/etc/yum.repos.d}<mailto:%7broot@spacewalk%7d-%7b/etc/yum.repos.d%7d> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum 22:37:57 ====================================== 22:37:57 | Channel: linux7-x86_64 22:37:57 ====================================== 22:37:57 Sync of channel started. 22:37:57 22:37:57 Processing repository with URL: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os 22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try. https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)" 22:37:59 Sync of channel completed in 0:00:01. 22:37:59 Total time: 0:00:01 Please help on this issue. Thanks, Lakshmi Mandava On Wed, Jul 3, 2019 at 11:21 PM Lakshmi Narayana <mandava2...@gmail.com<mailto:mandava2...@gmail.com>> wrote: Hi All, I’ve installed Open Spacewalk 2.8 on a RHEL 7 server and configured CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any issues I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that all my environment systems patch and administration on single patching solution I have done the below configurations but getting the below errors 1. # cp -p /etc/rhsm/ca/redhat-uep.pem /usr/share/pki/ca-trust-source/anchors/ # update-ca-trust 2. Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL Key and the SSL Client Key. In the redhat.repo file you'll see something like this: sslcacert = /etc/rhsm/ca/redhat-uep.pem (the RHEL CA Signing SSL certificate) sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem (RHEL Client Key SSL certificate) sslclientcert = /etc/pki/entitlement/<the same big long number as above>.pem (RHEL Entitlement/Client certificate) The contents of the sslclientcert file is the key you want to register in spacewalk as the Red Hat Entitlement Key. I created my keys with these names: RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement. For each key you create a key, put in the description, select type SSL and paste the contents of the appropriate file into the Key contents field 3. Created Redhat 7.6 channel in spacewalk wegUI For GPG Key ID: FD431D51, and GPG key fingerprint: 567E 347A D004 4ADE 55BA 8A5F 199E 2F91 FD43 1D51 baseurl: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os and in the repository selected CA signing, RHEL client key and rhel entitlement 4. {root@spacewalk}-{/etc/yum.repos.d}<mailto:%7broot@spacewalk%7d-%7b/etc/yum.repos.d%7d> # /usr/bin/spacewalk-repo-sync --channel linux7-x86_64 --type yum 22:37:57 ====================================== 22:37:57 | Channel: linux7-x86_64 22:37:57 ====================================== 22:37:57 Sync of channel started. 22:37:57 22:37:57 Processing repository with URL: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os 22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms: [Errno 256] No more mirrors to try. https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml: [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)" 22:37:59 Sync of channel completed in 0:00:01. 22:37:59 Total time: 0:00:01 Please help on this issue. Thanks, Lakshmi Mandava
_______________________________________________ Spacewalk-list mailing list Spacewalk-list@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-list
