pulp_centos_errata_import
pulp_centos_errata_import copied to clipboard
Problem with custom TLS cert
When I first ran your script I saw a number of unexpected EOF errors after "getting inventory" and before errata analysis.
INFO: Getting server inventory sh: -c: line 0: unexpected EOF while looking for matching
'' sh: -c: line 1: syntax error: unexpected end of file sh: -c: line 0: unexpected EOF while looking for matching
'' sh: -c: line 1: syntax error: unexpected end of file NOTICE: Skipping errata CEBA-2011:1778 (CentOS libvirt Update) -- No packages found
I discovered pulp-admin was listing my TLS SANs.
The server hostname configured on the client did not match the name found in the server's SSL certificate. The client attempted to connect to [hostname] but the server returned [DNS:hostname.example.com, IP Address:10.x.x.x] as its hostname. The expected hostname can be changed in the client configuration file.
The problem is pulp-admin defaults to socket.gethostname() as its 'host' value. My custom TLS cert doesn't contain a SAN for the hostname. Only the FQDN is present in the cert.
https://github.com/pulp/pulp/blob/master/client_admin/etc/pulp/admin/admin.conf
I copied the default pulp-admin config (/etc/pulp/admin/admin.conf) to my script directory. Changed the "host" value to my FQDN. Then added a custom config file flag to the 3 or 4 pulp-admin calls you have in the script.