Skip to content
This repository has been archived by the owner on Jun 3, 2020. It is now read-only.

ChangeCaCert

Jump to bottom
Grant Gainey edited this page Dec 12, 2016 · 2 revisions

Change CA certificate

Please note! following these steps will render all clients unable to connect until you redeploy the new ca cert ( RHN-ORG-TRUSTED-SSL-CERT) to EVERY client currently connection to the spacewalk/satellite server.

Recreate CA cert:

  1. mv /root/ssl-build /root/ssl-build.bak
  2. cd /root
  3. rhn-ssl-tool --gen-ca
  4. rhn-ssl-tool --gen-server
  5. cp ./ssl-build/RHN-ORG-TRUSTED-SSL-CERT ./ssl-build/rhn-org-trusted-ssl-cert-1.0-1.noarch.rpm /var/www/html/pub
  6. rpm -e rhn-org-httpd-ssl-key-pair-HOSTNAME
  7. rpm -ivh ./ssl-build/HOSTNAME/rhn-org-httpd-ssl-key-pair-HOSTNAME-1.0-1.noarch.rpm
  8. rhn-ssl-dbstore -vvv --ca-cert /root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
  9. spacewalk-service restart
  10. Redeploy RHN-ORG-TRUSTED-SSL-CERT to clients (if needed)

Do you want to contribute to this wiki? See page WikiContribute for more info.

Help

Documentation

Clone this wiki locally