Project

General

Profile

Actions

Bug #32346

open

Trying to load signed certificate

Added by Brad Van Orden about 3 years ago. Updated about 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

I've done this before without problems, but this is on a fresh installation.
Generate CSR:

if [[ ! -d /root/sat_cert ]]; then mkdir /root/sat_cert;fi
cd /root/sat_cert
openssl genrsa -out /root/sat_cert/satellite_cert_key.pem 2048
SUBJ="/C=US/ST=MD/L=Baltimore/OU=OurOrg/OU=L134/CN=$(hostname -f)/emailAddress=admins@ourorg.com" 
openssl req -new -key /root/sat_cert/satellite_cert_key.pem \
-out /root/sat_cert/satellite_cert_csr.pem \
-subj ${SUBJ} -sha384

cat /root/sat_cert/satellite_cert_csr.pem  # Upload to CA for signing.
Pull down the trust chain and place in /root/sat_cert.
Pull down the signed server certificate and put into /root/sat_cert/satellite_cert.pem

katello-certs-check \
-c /root/sat_cert/satellite_cert.pem \
-k /root/sat_cert/satellite_cert_key.pem \
-b /root/sat_cert/trust.pem

foreman-installer --scenario-katello \
--certs-server-cert /root/sat_cert/satellite_cert.pem \
--certs-server-key /root/sat_cert/satellite_cert_key.pem \
--certs-server-ca-cert /root/sat_cert/trust.pem \
--certs-update-server --certs-update-server-ca

Everything works fine up until the foreman-installer command. It shows on output:

[NOTICE] [configure] 2000 out of 2188 done.
[ERROR] [configure] 'pulpcore-manager migrate --noinput' returned 1 instead of one of [0]
[ERROR] [configure] /Stage[main]/Pulpcore::Database/Pulpcore::Admin[migrate --noinput]/Exec[pulpcore-manager migrate --noinput]/returns:  change from 'notrun' to ['0'] failed: 'pulpcore-manager mirate --noinput' returned 1 instead of one of [0]
...
  There were errors detected during install.
  Please address the errors and re-run the installer to ensure the system is properly configured.
  Failing to do so is likely to result in broken functionality.

  The full log is at /var/log/foreman-installer/katello.log

Looking at the log did not give me any further clues. Not sure what has happened. Does anyone have a clue?

I am running on CentOS 7.9
foreman 2.3.3-1
katello 3.18.2-1
candlepin 3.1.22-1
puppetserver 6.15.1-1

Actions #1

Updated by Oleh Fedorenko about 3 years ago

  • Project changed from Hammer CLI to Installer

Moving to installer since it's not a bug in hammer. Not sure which component is more relevant though.

Actions

Also available in: Atom PDF