You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Refs #36843 - Avoid running katello-certs-check for proxies (theforeman#2566)
The foreman-proxy-certs-generate command (and its branded version) now
runs katello-certs-check so there's no more need to run it manually.
This greatly simplifies the instructions for users.
Copy file name to clipboardExpand all lines: guides/common/modules/proc_deploying-a-custom-ssl-certificate-to-smart-proxy-server.adoc
+10-35Lines changed: 10 additions & 35 deletions
Original file line number
Diff line number
Diff line change
@@ -14,48 +14,23 @@ For more information, see {InstallingSmartProxyDocURL}registering-to-satellite-s
14
14
For more information, see {InstallingSmartProxyDocURL}installing-capsule-server-packages_{smart-proxy-context}[Installing {SmartProxyServer} Packages].
15
15
16
16
.Procedure
17
-
. On your {ProjectServer}, validate the custom SSL certificate input files:
17
+
. On your {ProjectServer}, generate a certificate bundle:
<1> Path to {SmartProxyServer} certificate file that is signed by a Certificate Authority.
28
31
<2> Path to the private key that was used to sign {SmartProxyServer} certificate.
29
32
<3> Path to the Certificate Authority bundle.
30
33
+
31
-
If you set a wildcard value `*` for the certificate's Common Name `CN =` in the `/root/{context}_cert/openssl.cnf` configuration file, you must add the `-t {certs-proxy-context}` option to the `katello-certs-check` command.
32
-
+
33
-
If the command is successful, it returns two `{certs-generate}` commands, one of which you must use to generate the certificate archive file for your {SmartProxyServer}.
34
-
+
35
-
.Example output of `katello-certs-check`
36
-
[options="nowrap", subs="+quotes,attributes"]
37
-
----
38
-
Validation succeeded.
39
-
40
-
To use them inside a NEW ${smart-proxy-capitalized}, run this command:
. On your {ProjectServer}, from the output of the `katello-certs-check` command, depending on your requirements, enter the `{certs-generate}` command that generates a certificate for a new or existing {SmartProxy}.
56
-
+
57
-
In this command, change `{smart-proxy-capitalized}` to the FQDN of your {SmartProxyServer}.
58
-
+
59
34
. Retain a copy of the `{foreman-installer}` command that the `{certs-generate}` command returns for deploying the certificate to your {SmartProxyServer}.
0 commit comments