Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1166191 - document how to set up Satellite 6/Capsule with custom certificates
Summary: document how to set up Satellite 6/Capsule with custom certificates
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Docs Install Guide
Version: 6.0.5
Hardware: All
OS: Linux
unspecified
high
Target Milestone: Unspecified
Assignee: Hayley Hudgeons
QA Contact: Adam Strong
URL:
Whiteboard:
: 1248401 (view as bug list)
Depends On:
Blocks: GSS_Sat6Beta_Tracker, GSS_Sat6_Tracker
TreeView+ depends on / blocked
 
Reported: 2014-11-20 14:42 UTC by Chris Roberts
Modified: 2019-09-25 20:31 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-08-10 14:50:57 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 1275053 0 None None None Never

Description Chris Roberts 2014-11-20 14:42:48 UTC 
Description of problem:
when using a 3 tier ca and server katello cant not install correctly and errors out with 

Version-Release number of selected component (if applicable):


How reproducible:

Steps to Reproduce:
1. install server, update, install katello
2. katello-installer and pass the issuing ca and server cert
3. hostname matches cert
4. dns works

Actual results:
server errors out with foreman-proxy trying to verify the cert

Expected results:


Additional info:
Comment 1 RHEL Program Management 2014-11-20 14:53:54 UTC 
Since this issue was entered in Red Hat Bugzilla, the release flag has been
set to ? to ensure that it is properly evaluated for this release.
Comment 10 Ivan Necas 2014-11-21 09:10:08 UTC 
The resolution is to include all the certs in the chain into a bundle and use that as the ca certificate passed to katello-installer:

   cat 1st_ca.cer 2nd_ca.cer 3th_ca.cer > ca.bundle
   katello-installer --certs-server-ca-cert ~/ca.bundle --certs-update-server-ca

From my testing, all the services work properly when using the bundle as the ca cert
Comment 11 Bryan Kearney 2014-11-21 14:52:28 UTC 
Based on #c10 I am changing this to an install guide documentation. There is a kcs document on this as well.

https://access.redhat.com/solutions/1275053
Comment 16 Deon Ballard 2015-10-09 01:37:26 UTC 
*** Bug 1248401 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.