Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change note regarding copying certificates. #71

Open
mbrookhuis opened this issue Aug 12, 2020 · 0 comments
Open

Change note regarding copying certificates. #71

mbrookhuis opened this issue Aug 12, 2020 · 0 comments

Comments

@mbrookhuis
Copy link

A small comment on getting the certificates from the other servers to the hub master. I would put a line it to rename the certificate or rather add the name of the server to the certificate name. All certificates will have the same name. Knowing the customer they will often overwrite the other certificates. And also if you need to replace a certificate it is easier when the server name is included

Original text:
Note
In order to use https to connect to peripheral Servers, in addition to setting HUB_CONNECT_USING_SSL flag to true, SSL certificates for all the peripheral Servers need to be installed on the machine where the hub-xmlrpc-api service runs. This can be achieved by copying the RHN-ORG-TRUSTED-SSL-CERT certificate file from each peripheral Server's pub directory (https:///pub/) to /etc/pki/trust/anchors/ and then running the update-ca-certificates command.

Maybe better version:
Note
In order to use https to connect to peripheral Servers, in addition to setting HUB_CONNECT_USING_SSL flag to true, SSL certificates for all the peripheral Servers need to be installed on the machine where the hub-xmlrpc-api service runs. This can be achieved by copying the RHN-ORG-TRUSTED-SSL-CERT certificate file from each peripheral Server's pub directory (https:///pub/) to /etc/pki/trust/anchors/. Add the name of the server where the certificate is being copied from to the name to prevent confusion and overwriting of certificates. To apply the certificates run the update-ca-certificates command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant