SSL error after importing redhat manifest

Problem:

After importing the subscription manifest and the subscriptions become available, I get an SSL error notification each time I refresh the Content -> Subscription page.

SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A

Also, the same ssl error appears on Administration -> Organizations -> Edit.

Under Content -> RedHat repositories some become available but no all which should normally would.

If I remove the manifest, everything goes back to normal.

The server is behind a proxy but I disabled SSL inspection and proxy auth to no avail.

Expected outcome:

RedHat repositories available

Foreman and Proxy versions:

Foreman version: 2.3.3
Plugins:

  • foreman-tasks 3.0.3
  • foreman_remote_execution 4.2.2
  • foreman_virt_who_configure 0.5.5
  • katello 3.18.1

Distribution and version:
RedHat 7.6

Other relevant data:

    2021-03-26T08:54:15 [I|app|dfab1054] Started GET "/katello/api/v2/products/128/repository_sets/9318/available_repositories" for 127.0.0.1 at 2021-03-26 08:54:15 +0100
2021-03-26T08:54:15 [I|app|dfab1054] Processing by Katello::Api::V2::RepositorySetsController#available_repositories as JSON
2021-03-26T08:54:15 [I|app|dfab1054]   Parameters: {"api_version"=>"v2", "product_id"=>"128", "id"=>"9318"}
2021-03-26T08:54:15 [I|bac|dfab1054] Task {label: Actions::Katello::RepositorySet::ScanCdn, id: 9c265091-6695-463f-8baf-262da9c0ede5, execution_plan_id: 7b9917ee-6b62-4543-8009-1a9a4c5a2c8d} state changed: planning
2021-03-26T08:54:15 [I|bac|] Task {label: Actions::Katello::RepositorySet::ScanCdn, id: 9c265091-6695-463f-8baf-262da9c0ede5, execution_plan_id: 7b9917ee-6b62-4543-8009-1a9a4c5a2c8d} state changed: planned
2021-03-26T08:54:15 [I|bac|] Task {label: Actions::Katello::RepositorySet::ScanCdn, id: 9c265091-6695-463f-8baf-262da9c0ede5, execution_plan_id: 7b9917ee-6b62-4543-8009-1a9a4c5a2c8d} state changed: running
2021-03-26T08:54:15 [I|app|a937fe58] Started GET "/rhsm/consumers/2e31175b-dc94-4498-87c8-7fc2c6546fa2/compliance" for 127.0.0.1 at 2021-03-26 08:54:15 +0100
2021-03-26T08:54:15 [I|app|a937fe58] Processing by Katello::Api::Rhsm::CandlepinProxiesController#get as JSON
2021-03-26T08:54:15 [I|app|a937fe58]   Parameters: {"id"=>"2e31175b-dc94-4498-87c8-7fc2c6546fa2"}
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [I|app|a937fe58] Completed 200 OK in 51ms (Views: 0.4ms | ActiveRecord: 2.5ms | Allocations: 3906)
2021-03-26T08:54:15 [E|app|] Failed at scanning for repository: undefined method `resolve_substitutions' for nil:NilClass
2021-03-26T08:54:15 [I|bac|] Task {label: Actions::Katello::RepositorySet::ScanCdn, id: 9c265091-6695-463f-8baf-262da9c0ede5, execution_plan_id: 7b9917ee-6b62-4543-8009-1a9a4c5a2c8d} state changed: stopped  result: success
2021-03-26T08:54:15 [I|bac|] Task {label: Actions::Katello::RepositorySet::ScanCdn, id: 9c265091-6695-463f-8baf-262da9c0ede5, execution_plan_id: 7b9917ee-6b62-4543-8009-1a9a4c5a2c8d} state changed: stopped  result: success
2021-03-26T08:54:15 [I|app|]   Rendering /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.18.1/app/views/katello/api/v2/repository_sets/available_repositories.json.rabl within katello/api/v2/layouts/collection
2021-03-26T08:54:15 [I|app|]   Rendered /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.18.1/app/views/katello/api/v2/repository_sets/available_repositories.json.rabl within katello/api/v2/layouts/collection (Duration: 3.9ms | Allocations: 2795)

Hello @linuxman ,

Is the manifest recent? Also can you get the error task logs when you try to expand a repository set on redhat repository page from the foreman tasks page?

1 Like

Hi @sajha,

The manifest is freshly generated.
The code snippet above is from production.log after expanding a repository set.

Thanks a lot!

@Jonathon_Turel , @Partha_Aji1 , @jeremylenz
Paging smarter folks for more visibility on this. :slight_smile:

@linuxman:

Are you able to see more logs for task Actions::Katello::RepositorySet::ScanCdn that fails under Monitor > Tasks > ScanCdn task from the UI.

There are not ScanCdn with error.

I actually removed the added(many times) the manifest until under Red Hat Repositories the repos I was interested in were available.

Still… if I go to organizations/7-MySecondOrganization/edit I get the error. Works fine if I remove the redhat manifest.

Cheers!