SALT keys are not visible/listed in SUSE Manager Server web-UI

This document (000019774) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Manager Server 4.1

Situation

Combination of following issues can be observed on SUSE Manager Server:
  • SALT keys can not be listed in SUSE Manager Server web-UI and there is only "Loading" icon displayed
  • when salt clients are registered, keys can be accepted on SALT level, however, systems (clients) are not listed in SUSE Manager Server web-UI
  • Following error messages occur in:
    • SUSE Manager Server web-UI
    • rhn_web_ui.log:
Unexpected error, please reload the page and check server logs.

2020-11-03 09:37:21,649 [ajp-nio-0:0:0:0:0:0:0:1-8009-exec-4] ERROR com.redhat.rhn.frontend.servlets.SessionFilter - Error during transaction. Rolling back
java.lang.RuntimeException: com.suse.salt.netapi.exception.SaltException: javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?

 

Resolution

From the following file :
/etc/salt/master.d/susemanager.conf

 

Please remove the option :
disable_ssl: true

and restart all salt and spacewalk related services. 
Please do make sure that all services were restarted properly and no failure occurs.

Cause

In the aftermath of the following vulnerability,  CVE-2020-8028 SSL should *not* be disabled.

​​​​​​​The file /etc/salt/master.d/susemanager.conf is provided by the spacewalk-setup package and it is not supposed to be changed by users.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000019774
  • Creation Date: 03-Nov-2020
  • Modified Date:03-Nov-2020
    • SUSE Manager Server

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback@suse.com

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center