Upgrading to puppet4 fails as apache conf still refers to /var/lib/puppet/ssl
Upgrading to puppet4 fails as httpd cannot start since /etc/httpd/conf.d/25-puppet.conf still refers to /var/lib/puppet/ssl
# foreman-installer -S katello --upgrade-puppet ... Upgrade Step: restart_services... ... Redirecting to /bin/systemctl start httpd.service Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details. Redirecting to /bin/systemctl start foreman-tasks.service Some services failed to start: httpd Upgrade step restart_services failed. Check logs for more information. # journalctl -u httpd Jan 30 16:43:59 <FQDN> systemd: Stopped The Apache HTTP Server. Jan 30 16:48:23 <FQDN> systemd: Starting The Apache HTTP Server... Jan 30 16:48:23 <FQDN> httpd: AH00526: Syntax error on line 34 of /etc/httpd/conf.d/25-puppet.conf: Jan 30 16:48:23 <FQDN> httpd: SSLCertificateFile: file '/var/lib/puppet/ssl/certs/<FQDN>.pem' does not exist or is empty # grep /var/lib/puppet/ssl /etc/httpd/conf.d/25-puppet.conf SSLCertificateFile "/var/lib/puppet/ssl/certs/<FQDN>.pem" SSLCertificateKeyFile "/var/lib/puppet/ssl/private_keys/<FQDN>.pem" SSLCertificateChainFile "/var/lib/puppet/ssl/ca/ca_crt.pem" SSLCACertificateFile "/var/lib/puppet/ssl/ca/ca_crt.pem" SSLCARevocationFile "/var/lib/puppet/ssl/ca/ca_crl.pem"
But the ssl files were moved to /etc/puppetlabs/puppet/ssl