Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1510787 - [RFE] Certificate update using daemon failed
Summary: [RFE] Certificate update using daemon failed
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: subscription-manager
Version: 7.5
Hardware: Unspecified
OS: Unspecified
low
unspecified
Target Milestone: rc
: ---
Assignee: candlepin-bugs
QA Contact: Red Hat subscription-manager QE Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-11-08 09:03 UTC by Wei Liu
Modified: 2018-11-02 01:57 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:


Attachments (Terms of Use)
the rhsm log (deleted)
2017-11-08 09:04 UTC, Wei Liu
no flags Details
the rhsmcertd log (deleted)
2017-11-08 09:04 UTC, Wei Liu
no flags Details

Description Wei Liu 2017-11-08 09:03:30 UTC
Description of problem:
Error message was shown in rhsm.log:
2017-11-08 08:50:55,297 [ERROR] rhsmcertd-worker:16644:MainThread @rhsmcertd-worker:74 - Either the consumer is not registered or the certificates are corrupted. Certificate update using daemon failed.

Version-Release number of selected component (if applicable):
[root@cloud-qe-16-vm-01 rhsm]# rpm -qa | egrep "subscription|rhsm"
subscription-manager-gui-1.20.5-1.el7.x86_64
subscription-manager-rhsm-certificates-1.20.5-1.el7.x86_64
subscription-manager-rhsm-1.20.5-1.el7.x86_64
subscription-manager-1.20.5-1.el7.x86_64
subscription-manager-initial-setup-addon-1.20.5-1.el7.x86_64

How reproducible:
always

Steps to Reproduce:
1.Install build RHEL-7.5-20171107.1

2.Try to Register the system and tail the rhsm.log
[root@cloud-qe-16-vm-01 ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: renew_test    
Password: 
The system has been registered with ID: 7bf7e70b-a865-44d0-81b0-ae56b928a0e4
The registered system name is: cloud-qe-16-vm-01.idmqe.lab.eng.bos.redhat.com

[root@cloud-qe-16-vm-01 rhsm]# tail -f rhsm.log | grep -i error
2017-11-08 08:50:55,297 [ERROR] rhsmcertd-worker:16644:MainThread @rhsmcertd-worker:74 - Either the consumer is not registered or the certificates are corrupted. Certificate update using daemon failed.

Actual results:
As step 2. an error message was shown in rhsm.log

Expected results:
No error message shown when try to register the system

Additional info:

Comment 2 Wei Liu 2017-11-08 09:04:13 UTC
Created attachment 1349324 [details]
the rhsm log

Comment 3 Wei Liu 2017-11-08 09:04:42 UTC
Created attachment 1349325 [details]
the rhsmcertd log

Comment 4 Chris Snyder 2017-11-16 15:54:51 UTC
We will turn this into an RFE. We will differentiate between unregistered and corrupt certificates.

If unregistered, the messaging will be logged at the info level rather than error level.

Comment 5 qianzhan 2018-01-17 07:53:58 UTC
Can not reproduce this bug on RHEL-7.5-20180116.0:

[root@localhost ~]# subscription-manager register
Registering to: subscription.rhsm.stage.redhat.com:443/subscription
Username: rnew_test
Password: 
The system has been registered with ID: 51f8871a-1610-4255-b05e-de878c5f9c31
The registered system name is: localhost.localdomain
[root@localhost ~]# cat /var/log/rhsm/rhsm.log
2018-01-17 15:45:20,482 [INFO] rhsmd:23064:MainThread @rhsmd:279 - rhsmd started
2018-01-17 15:45:20,535 [ERROR] subscription-manager:23058:MainThread @identity.py:145 - Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an exception with msg: [Errno 2] No such file or directory: '/etc/pki/consumer/key.pem'
2018-01-17 15:45:20,544 [INFO] subscription-manager:23058:MainThread @managercli.py:452 - X-Correlation-ID: c657869a88384bae80af25551a06ad95
2018-01-17 15:45:20,544 [INFO] subscription-manager:23058:MainThread @managercli.py:341 - Client Versions: {'subscription-manager': '1.20.8-1.el7'}
2018-01-17 15:45:20,544 [INFO] subscription-manager:23058:MainThread @connection.py:868 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2018-01-17 15:45:20,545 [INFO] subscription-manager:23058:MainThread @connection.py:868 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=none
2018-01-17 15:45:20,545 [INFO] subscription-manager:23058:MainThread @managercli.py:341 - Client Versions: {'subscription-manager': '1.20.8-1.el7'}
2018-01-17 15:45:20,559 [INFO] subscription-manager:23058:MainThread @managercli.py:317 - Consumer Identity name=None uuid=None
2018-01-17 15:45:20,560 [INFO] subscription-manager:23058:MainThread @managercli.py:317 - Consumer Identity name=None uuid=None
2018-01-17 15:45:25,404 [INFO] subscription-manager:23058:MainThread @connection.py:868 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=basic username=rnew_test
2018-01-17 15:46:13,137 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=48bcbfd4-8e87-418e-b3d8-74e65fc3fcb9, request="GET /subscription/users/rnew_test/owners"
2018-01-17 15:46:14,325 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, request="GET /subscription/"
2018-01-17 15:46:14,352 [INFO] subscription-manager:23058:MainThread @dmiinfo.py:75 - Using dmidecode dump file: /dev/mem
2018-01-17 15:46:18,743 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=ccd8090b-ace3-4651-b604-9ba17d60fa5b, request="POST /subscription/consumers?owner=11367791"
2018-01-17 15:46:18,746 [INFO] subscription-manager:23058:MainThread @managerlib.py:71 - Consumer created: localhost.localdomain (51f8871a-1610-4255-b05e-de878c5f9c31)
2018-01-17 15:46:18,749 [INFO] subscription-manager:23058:MainThread @connection.py:868 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2018-01-17 15:46:20,894 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, request="GET /subscription/"
2018-01-17 15:46:22,352 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=34d74c08-ad59-4400-9536-97808755c76e, request="GET /subscription/status"
2018-01-17 15:46:22,353 [INFO] subscription-manager:23058:MainThread @managercli.py:352 - Server Versions: {'rules-version': u'5.26', 'candlepin': u'2.0.43-1', 'server-type': u'Red Hat Subscription Management'}
2018-01-17 15:46:23,540 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, request="GET /subscription/"
2018-01-17 15:46:25,817 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=204, request="PUT /subscription/consumers/51f8871a-1610-4255-b05e-de878c5f9c31/packages"
2018-01-17 15:46:25,853 [INFO] subscription-manager:23058:MainThread @dmiinfo.py:75 - Using dmidecode dump file: /dev/mem
2018-01-17 15:46:27,363 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=b08812f3-fc04-4ad4-a2c4-df63c6ee3dc5, request="GET /subscription/status"
2018-01-17 15:46:27,364 [INFO] subscription-manager:23058:MainThread @managercli.py:1175 - System registered, updating entitlements if needed
2018-01-17 15:46:28,894 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=d07dc6cc-3d5e-48be-972e-6e257c2f9d31, request="GET /subscription/consumers/51f8871a-1610-4255-b05e-de878c5f9c31/certificates/serials"
2018-01-17 15:46:28,894 [INFO] subscription-manager:23058:MainThread @entcertlib.py:131 - certs updated:
Total updates: 0
Found (local) serial# []
Expected (UEP) serial# []
Added (new)
  <NONE>
Deleted (rogue):
  <NONE>
2018-01-17 15:46:30,457 [INFO] subscription-manager:23058:MainThread @connection.py:586 - Response: status=200, requestUuid=72b31383-d3ad-4546-9b5c-d31c21f2968e, request="GET /subscription/consumers/51f8871a-1610-4255-b05e-de878c5f9c31/compliance"
2018-01-17 15:46:30,458 [INFO] subscription-manager:23058:MainThread @cert_sorter.py:205 - Product status: valid_products= partial_products= expired_products= unentitled_producs=69 future_products= valid_until=None
2018-01-17 15:46:30,515 [INFO] rhsmd:23064:MainThread @connection.py:868 - Connection built: host=subscription.rhsm.stage.redhat.com port=443 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/ insecure=False
2018-01-17 15:46:32,142 [INFO] rhsmd:23064:MainThread @connection.py:586 - Response: status=200, requestUuid=e5a465aa-c813-43a6-9549-7f7cadacf778, request="GET /subscription/consumers/51f8871a-1610-4255-b05e-de878c5f9c31/compliance"
2018-01-17 15:46:32,143 [INFO] rhsmd:23064:MainThread @cert_sorter.py:205 - Product status: valid_products= partial_products= expired_products= unentitled_producs=69 future_products= valid_until=None


this bug is not found in rhsm.log, but Bug 1510696.
So please move this bug to ON_QA, so that I can close it.


Note You need to log in before you can comment on or make changes to this bug.