Hi...
I'm trying to get cobbler to sync the new RH Oracle Java repo. I have a suitable key/cert pairing that allows me to access the repo and I can create a repo in cobbler with the key, cert and cacert file in the yum options as normal.
when running a reposync, it downloads all of the rpms as expected but then fails to pull the repomd.xml file with an error related to key/sig:
Tue Jan 23 15:08:46 2018 - DEBUG | received on stderr: Tue Jan 23 15:08:46 2018 - INFO | Exception occured: <class 'cobbler.cexceptions.CX'> Tue Jan 23 15:08:46 2018 - INFO | Exception value: 'urlgrabber failed to fetch metadata from https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_64/o... (14, 'curl#35 - "Peer reports failure of signature verification or key exchange."')' Tue Jan 23 15:08:46 2018 - INFO | Exception Info: File "/usr/lib/python2.7/site-packages/cobbler/utils.py", line 106, in die raise CX(msg)
If I try to pull that URL from the command line using the certs and key, it works fine. That implies that it is switching to the wrong key/certs or none at all...
we are running 2.8.2.
any clues as to why it works for the rpms but not for the metadata?
thanks
GREG
note that we are using this patch to action_reposync.py:
https://github.com/cobbler/cobbler/pull/1763/files
On 23/01/18 15:13, Gregory Matthews wrote:
Hi...
I'm trying to get cobbler to sync the new RH Oracle Java repo. I have a suitable key/cert pairing that allows me to access the repo and I can create a repo in cobbler with the key, cert and cacert file in the yum options as normal.
when running a reposync, it downloads all of the rpms as expected but then fails to pull the repomd.xml file with an error related to key/sig:
Tue Jan 23 15:08:46 2018 - DEBUG | received on stderr: Tue Jan 23 15:08:46 2018 - INFO | Exception occured: <class 'cobbler.cexceptions.CX'> Tue Jan 23 15:08:46 2018 - INFO | Exception value: 'urlgrabber failed to fetch metadata from https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x86_64/o... (14, 'curl#35 - "Peer reports failure of signature verification or key exchange."')' Tue Jan 23 15:08:46 2018 - INFO | Exception Info: File "/usr/lib/python2.7/site-packages/cobbler/utils.py", line 106, in die raise CX(msg)
If I try to pull that URL from the command line using the certs and key, it works fine. That implies that it is switching to the wrong key/certs or none at all...
we are running 2.8.2.
any clues as to why it works for the rpms but not for the metadata?
thanks
GREG
Maybe too late to help, but you can debug urlgrabber thusly:
Create /etc/sysconfig/cobblerd, with contents: URLGRABBER_DEBUG=1
And restart the cobblerd service.
-----Original Message----- From: Gregory Matthews [mailto:greg.matthews@diamond.ac.uk] Sent: Tuesday, January 23, 2018 11:23 AM To: cobbler mailing list cobbler@lists.fedorahosted.org Subject: [cobbler] Re: reposync fail after downloading rpms
note that we are using this patch to action_reposync.py:
https://github.com/cobbler/cobbler/pull/1763/files
On 23/01/18 15:13, Gregory Matthews wrote:
Hi...
I'm trying to get cobbler to sync the new RH Oracle Java repo. I have a suitable key/cert pairing that allows me to access the repo and I can create a repo in cobbler with the key, cert and cacert file in the yum options as normal.
when running a reposync, it downloads all of the rpms as expected but then fails to pull the repomd.xml file with an error related to key/sig:
Tue Jan 23 15:08:46 2018 - DEBUG | received on stderr: Tue Jan 23 15:08:46 2018 - INFO | Exception occured: <class 'cobbler.cexceptions.CX'> Tue Jan 23 15:08:46 2018 - INFO | Exception value: 'urlgrabber failed to fetch metadata from https://cdn.redhat.com/content/dist/rhel/workstation/6/6Workstation/x8 6_64/oracle-java-rm/os/repodata/repomd.xml (14, 'curl#35 - "Peer reports failure of signature verification or key exchange."')' Tue Jan 23 15:08:46 2018 - INFO | Exception Info: File "/usr/lib/python2.7/site-packages/cobbler/utils.py", line 106, in die raise CX(msg)
If I try to pull that URL from the command line using the certs and key, it works fine. That implies that it is switching to the wrong key/certs or none at all...
we are running 2.8.2.
any clues as to why it works for the rpms but not for the metadata?
thanks
GREG
cobbler@lists.fedorahosted.org