FW: currentupgrade

So I bit the bullet and upgraded (one of our) servers from 1.0.5 to 1.4.2,
here are my notes that may prove useful to someone... for the record, all
appears great now, thanks Hunter et al!
								-Rob


Before upgrading:

- back up your existing /etc/current directory, and /etc/httpd/conf for good
  measure. cadmin create_certificate will overwrite RHNS-CA-CERT in
/etc/current
  and if you mistakenly put in httpd.conf instead of current.httpd.conf then
  cadmin create_apache_config will overwrite that too.
  [perhaps cadmin create* should refuse to run if there's an existing file?]

- you should stop current manually before upgrading or else there may be
  lingering stunnel procs




So you've just upgraded:

- if you get an error "db_dir or web_dir not found" when running cadmin
  you probably need to remove the db_dir lines and add in a current_dir line

- if you have a .pem file from stunnel:
        the CERTIFICATE section goes in server.crt
        the RSA PRIVATE KEY section goes in server.key
  the rest of the directions are as in installation.txt (note on perms
below)




Apache error log problems:

- if you get the following OpenSSL error:

OpenSSL: error:0B080074:lib(11):func(128):reason(116)

check the permissions on /etc/httpd/conf/ssl.key/server.key (should be 600)

- if you get an error:

IOError: [Errno 13] Permission denied: 'current.log'

make sure you changed log_file directive to be the full path (likely to
/var/log/httpd/current.log as per the installation.txt)



installation.txt issues:

- Note: the list of valid channels in the
  [current] section is a list of the channel labels of all channel sections,
  not a lit of the channel section names. This is a bug which will be 
  corrected in a future release.

I interpreted it badly, but it appears to mean that section names
must now match the channel name? I did that and it's all good now...

-  [root@server current]$ chown -R ugo+rx $current_dir

chown ugo+rx? hehehe... ^ugo+rx^apache