rdrgmnzs / pulp_centos_errata_import

Imports CentOS (from http://cefs.steve-meier.de/) errata into Pulp / Katello
61 stars 22 forks source link

Problem with custom TLS cert #26

Open trucaliber opened 7 years ago

trucaliber commented 7 years ago

When I first ran your script I saw a number of unexpected EOF errors after "getting inventory" and before errata analysis.

INFO: Getting server inventory sh: -c: line 0: unexpected EOF while looking for matching '' sh: -c: line 1: syntax error: unexpected end of file sh: -c: line 0: unexpected EOF while looking for matching'' sh: -c: line 1: syntax error: unexpected end of file NOTICE: Skipping errata CEBA-2011:1778 (CentOS libvirt Update) -- No packages found

I discovered pulp-admin was listing my TLS SANs.

The server hostname configured on the client did not match the name found in the server's SSL certificate. The client attempted to connect to [hostname] but the server returned [DNS:hostname.example.com, IP Address:10.x.x.x] as its hostname. The expected hostname can be changed in the client configuration file.

The problem is pulp-admin defaults to socket.gethostname() as its 'host' value. My custom TLS cert doesn't contain a SAN for the hostname. Only the FQDN is present in the cert.

https://github.com/pulp/pulp/blob/master/client_admin/etc/pulp/admin/admin.conf

I copied the default pulp-admin config (/etc/pulp/admin/admin.conf) to my script directory. Changed the "host" value to my FQDN. Then added a custom config file flag to the 3 or 4 pulp-admin calls you have in the script.