Re: 1.4.2-1 strange problem SOLVED

OK I borrowed a clue from somewhere and found the problem --
I up2dated myself to death. Installing up2date changed the
certificate (duh) and caused the problem. Sheesh. Amazing what
a coffee break can do.

Sorry for the false alarm.

tomj



On Fri, 25 Oct 2002, Tom Jennings wrote:

> I'm having a strange problem with 1.4.2-1. I got it installed
> (with thanks to Rob Hagopian's notes) and apparently running.
> 
> Ran rhn_register on client successfully. up2date started OK, found
> updates, downloaded them, watched nice activity without errors
> in apache logs on the server. When it started install phase,
> I waited a minute then left the room (often induces errors :-)
> 
> I came back to a FATAL RPM ERROR on the client and SSL errors in
> the server log (below).
> 
> The server won't respond at all now. I restarted httpd
> successfully, no errors in apache log from restart.
> 
> I have a dead-stock 7.3 install for apache et al. 
> 
> If I execute current standalone (to see what it complains about) I get:
> $ current -c /etc/current/current.conf
> Traceback (innermost last):
>   File "/usr/sbin/current", line 169, in ?
>     main()
>   File "/usr/sbin/current", line 54, in main
>     if os.path.exists(config.cfg.getItem('pid_file')):
>   File "/usr/share/current/config.py", line 106, in getItem
>     return self._data[item]
> KeyError: pid_file
> 
> ('pid_file' isn't in the config file; if I add it it then
> complains about 'nodaemon'. Which makes no sense. So maybe this
> test is invalid.)
> 
> Any ideas?
> 
> 
> 
> ------------------------------------------------------------
> current log
> ... etc
> Oct 25 15:37:08 Header object successfully parsed: ['redhat-7.3-i386', '20021025134443']
> Oct 25 15:37:08 /usr/share/current/auth.py:isValid({})
> 
> (is last entry)
> 
> 
> ------------------------------------------------------------
> apache error log
> ... etc 
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[Last-Modified] == Thu, 24 Oct 2002 18:43:07 GMT
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[ETag] == "126fed-1d0f9-3db83f3b"
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[Accept-Ranges] == bytes
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[Content-Length] == 119033
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[Connection] == close
> [Fri Oct 25 15:37:08 2002] [notice] headers_out[Content-Type] == application/octet-stream
> [Fri Oct 25 15:37:08 2002] [notice] /XMLRPC/$RHN/redhat-7.3-i386/getPackage/ypserv-2.5-2.7x.i386.rpm
> [Fri Oct 25 15:37:08 2002] [notice] application/octet-stream
> [Fri Oct 25 16:03:58 2002] [error] mod_ssl: SSL handshake failed (server zero.wps.com:443, client 10.0.0.2) (OpenSSL library error follows)
> [Fri Oct 25 16:03:58 2002] [error] OpenSSL: error:14094418:lib(20):func(148):reason(1048)
> [Fri Oct 25 16:04:03 2002] [error] mod_ssl: SSL handshake failed (server zero.wps.com:443, client 10.0.0.2) (OpenSSL library error follows)
> [Fri Oct 25 16:04:03 2002] [error] OpenSSL: error:14094418:lib(20):func(148):reason(1048)
> [Fri Oct 25 16:04:08 2002] [error] mod_ssl: SSL handshake failed (server zero.wps.com:443, client 10.0.0.2) (OpenSSL library error follows)
> [Fri Oct 25 16:04:08 2002] [error] OpenSSL: error:14094418:lib(20):func(148):reason(1048)
> [Fri Oct 25 16:04:13 2002] [error] mod_ssl: SSL handshake failed (server zero.wps.com:443, client 10.0.0.2) (OpenSSL library error follows)
> [Fri Oct 25 16:04:13 2002] [error] OpenSSL: error:14094418:lib(20):func(148):reason(1048)
> [Fri Oct 25 16:04:18 2002] [error] mod_ssl: SSL handshake failed (server zero.wps.com:443, client 10.0.0.2) (OpenSSL library error follows)
> [Fri Oct 25 16:04:18 2002] [error] OpenSSL: error:14094418:lib(20):func(148):reason(1048)
> [
> 
> ------------------------------------------------------------
> ls -la /etc/current
> drwxr-xr-x    3 root     root         4096 Oct 25 16:40 ./
> drwxr-xr-x   85 root     root         8192 Oct 25 15:17 ../
> drw-r--r--    3 root     root         4096 Oct 25 13:29 1.3/
> -rw-r--r--    1 root     root         2222 Oct 25 13:31 cert.txt
> -rw-r--r--    1 root     root         4868 Oct 25 16:39 current.conf
> -rw-r--r--    1 root     root         5682 Oct 21 16:16 current.conf.1.4.2-1.dist
> -rw-r--r--    0 root     root         1265 Oct 25 13:31 current.crt
> -rw-r--r--    1 root     root          888 Oct 25 13:31 current.key
> -rw-r--r--    1 apache   root       169670 Oct 25 16:39 current.log
> -rw-r--r--    1 root     root         2153 Oct 25 13:31 current.pem
> -rw-r--r--    1 root     root         3487 Oct 25 13:31 RHNS-CA-CERT
> -rw-r--r--    1 root     root         6151 Oct 25 16:44 stunnel.log
> 
> ------------------------------------------------------------
> ls -la /etc/httpd/conf/ssl.crt
> drwx------    2 root     root         4096 Oct  8 11:41 ./
> drwxr-xr-x    8 root     root         4096 Oct 25 13:55 ../
> -rw-r--r--    1 root     root       242153 Jul  1 13:43 ca-bundle.crt
> -rw-r--r--    1 root     root         1522 Jul  1 13:43 Makefile.crt
> -rw-------    1 root     root         1265 Oct 25 13:57 server.crt
> -rw-r--r--    1 root     root         1472 Jul  1 13:43 snakeoil-ca-dsa.crt
> -rw-r--r--    1 root     root         1192 Jul  1 13:43 snakeoil-ca-rsa.crt
> -rw-r--r--    1 root     root         1452 Jul  1 13:43 snakeoil-dsa.crt
> -rw-r--r--    1 root     root         1176 Jul  1 13:43 snakeoil-rsa.crt
> 
> ------------------------------------------------------------
> 
> /etc/current/current.conf
> 
> # $Id$
> # zero.wps.com
> 
> 
> [current]
> valid_channels = WPS redhat-7.3-i386
> log_file = /etc/current/current.log    
> log_level = 7
> apache_config_file = /etc/httpd/conf/current.httpd.conf
> access_check_type = user
> access_check_arg = apache
> server_secret = grommet
> server_id = zero.wps.com
> current_dir = /d1/Current
> 
> # These are some text messages that the server can return to the clients
> #  in various API calls.
> ## The period is there ot provide a "blank line". Sheesh.
> welcome_message = "Welcome to the WPS up2date server."
> privacy_statement = "Privacy Statement for Hunter's up2date server: 
>     This is the internet - privacy is an illusion. 
>     .
>     Please note that only anonymous access is supported anyway - so while you 
>     have to get a valid system id (by going through the rhn_register program) 
>     there is no requirement to fill those fields out with real data. :) All 
>     that is required is that your architecture an os_release be accurately 
>     reported - and rhn_register fills that in automatically. "
> 
> ############################################################################
> [redhat-7.3-i386]
> name = Red Hat Linux 7.3
> parent_channel = 
> arch = i386
> os_release = 7.3
> description = Red Hat Linux 7.3
> srpm_check = 0
> rpm_dirs = /var/spool/up2date
> src_dirs = 
> 
> 
> [WPS]
> name = World Power Systems
> parent_channel = 
> description = foo for testing
> srpm_check = 0
> rpm_dirs = /d1/Current/WPS
> src_dirs = 
> 
> 
> ## END OF LINE ##
> 
> 
> _______________________________________________
> Current-server mailing list
> [email protected]
> http://lists.dulug.duke.edu/mailman/listinfo/current-server
> 

--