Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-8956

[RFE] Allow user to disable SSL verification for custom repositories hosted via SSL

XMLWordPrintable

    • None
    • None
    • None
    • None

      Description of problem:
      As a user, I have multiple yum repositories that I wish to use with Satellite 6. These repositories are internal to my organization, and are hosted via SSL via self-signed certificates.

      When synchronizing these repositories in Satellite 6, synchronization fails with

      "[Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"

      Version-Release number of selected component (if applicable):
      foreman-1.6.0.53-1.el6sat.noarch
      foreman-compute-1.6.0.53-1.el6sat.noarch
      foreman-discovery-image-6.5-20140620.2.el6sat.noarch
      foreman-gce-1.6.0.53-1.el6sat.noarch
      foreman-libvirt-1.6.0.53-1.el6sat.noarch
      foreman-ovirt-1.6.0.53-1.el6sat.noarch
      foreman-postgresql-1.6.0.53-1.el6sat.noarch
      foreman-proxy-1.6.0.33-1.el6sat.noarch
      foreman-selinux-1.6.0.14-1.el6sat.noarch
      foreman-vmware-1.6.0.53-1.el6sat.noarch
      katello-1.5.0-30.el6sat.noarch
      katello-certs-tools-1.5.6-1.el6sat.noarch
      katello-default-ca-1.0-1.noarch
      katello-installer-0.0.67-1.el6sat.noarch
      katello-server-ca-1.0-1.noarch
      pulp-katello-0.3-4.el6sat.noarch
      pulp-nodes-common-2.4.4-1.el6sat.noarch
      pulp-nodes-parent-2.4.4-1.el6sat.noarch
      pulp-puppet-plugins-2.4.4-1.el6sat.noarch
      pulp-puppet-tools-2.4.4-1.el6sat.noarch
      pulp-rpm-plugins-2.4.4-1.1.el6sat.noarch
      pulp-selinux-2.4.4-1.el6sat.noarch
      pulp-server-2.4.4-1.el6sat.noarch

      How reproducible:
      100%

      Steps to Reproduce:
      1. Create a custom product
      2. Create a repository of type 'yum' associated with the custom product
      3. Set the URL to https://foo.bar.com where https://foo.bar.com has a self-signed cert.
      4. Attempt to sync the repository.

      Actual results:

      "[Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed"

      Expected results:

      The repository should be synchronized.

      Additional info:

      This RFE requests the ability to disable SSL verification on a per-repository basis, with the appropriate options in hammer-cli and the API to do the same.

              jira-bugzilla-migration RH Bugzilla Integration
              jira-bugzilla-migration RH Bugzilla Integration
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: