Actions
Bug #11144
closedforeman-proxy cannot find puppet.cert - use incorrect cert name (i think by default)
Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Description
After i recreate puppet CA cert i get problem with foreman-proxy
No such file or directory - /var/lib/puppet/ssl/certs/puppet.pem
Trace:
Errno::ENOENT No such file or directory - /var/lib/puppet/ssl/certs/puppet.pem lib/proxy_api/resource.rb:19:in `read' lib/proxy_api/resource.rb:19:in `initialize' lib/proxy_api/puppetca.rb:5:in `initialize' app/services/smart_proxies/puppet_ca.rb:19:in `new' app/services/smart_proxies/puppet_ca.rb:19:in `all' app/services/smart_proxies/puppet_ca.rb:36:in `find_by_state' app/controllers/puppetca_controller.rb:8:in `index' app/models/concerns/foreman/thread_session.rb:33:in `clear_thread' lib/middleware/catch_json_parse_errors.rb:9:in `call'
in /etc/foreman-proxy/settings.d/foreman_proxy.yml all seems fine
--- ### File managed with puppet ### ## Module: 'foreman_proxy' :settings_directory: /etc/foreman-proxy/settings.d # SSL Setup # if enabled, all communication would be verfied via SSL # NOTE that both certificates need to be signed by the same CA in order for this to work # see http://theforeman.org/projects/smart-proxy/wiki/SSL for more information :ssl_ca_file: /var/lib/puppet/ssl/certs/ca.pem :ssl_certificate: /var/lib/puppet/ssl/certs/puppet.mydomain.com.pem :ssl_private_key: /var/lib/puppet/ssl/private_keys/puppet.mydomain.com.pem
but in log when i restart foreman-proxy i see
I, [2015-07-17T11:06:44.983418 #26094] INFO -- : 'foreman_proxy' settings were initialized with default values: :enabled: true I, [2015-07-17T11:10:29.119169 #26415] INFO -- : 'puppet' settings were initialized with default values: :puppet_provider: puppetrun, :puppetdir: /etc/puppet
In /etc/foreman-proxy/settings.d/puppet.yml also correct path to certificate
# URL of the puppet master itself for API requests :puppet_url: https://puppet.mydomain.com:8140 # SSL certificates used to access the puppet master API :puppet_ssl_ca: /var/lib/puppet/ssl/certs/ca.pem :puppet_ssl_cert: /var/lib/puppet/ssl/certs/puppet.mydomain.com.pem :puppet_ssl_key: /var/lib/puppet/ssl/private_keys/puppet.mydomain.com.pem
Why in Foreman Web interface i see "No such file or directory - /var/lib/puppet/ssl/certs/puppet.pem"?
Where i can setup this option?
Now i cannot remove and readd foreman_proxy, and i cannot import changes in modules.
Updated by Aleksei Yamschikov almost 10 years ago
i forget to add - foreman-proxy version 1.7.5
Updated by Dominic Cleal almost 10 years ago
- Status changed from New to Feedback
Look under Administer > Settings for ssl_* settings, those are the certificates that Foreman's using to communicate to the smart proxy. It uses the FQDN as determined by Facter by default.
Updated by Aleksei Yamschikov almost 10 years ago
Thank you. Now it work!
But i don't understand why it work before?
Updated by Anonymous almost 8 years ago
- Status changed from Feedback to Resolved
Actions