Actions
Bug #11660
closedIsolated capsule/reverse proxy doesn't work when using custom certificates
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1259294
Description of problem:
capsule-installer sets incorrect file as a CA for client authentication.
Steps to Reproduce:
1. install satellite and isolated capsule with custom certificatses
2. try to register the host though the isolated capsule
Actual results:
Unable to verify server's identity: tlsv1 alert unknown ca
Expected results:
Everything works
Additional info:
The core issue is using katello_server_ca (used for server certificates) instead of katello_default_ca (used for client certificates)
Actions