Feature #29892: Automatically use the server certificates for websockets - Installer - Foreman

Feature #29892

Automatically use the server certificates for websockets

Added by Ewoud Kohl van Wijngaarden 3 months ago. Updated about 2 months ago.

Status:

Closed

Priority:

Normal

Assignee:

Ewoud Kohl van Wijngaarden

Category:

Foreman modules

Target version:

Difficulty:

Triaged:

Yes

Bugzilla link:

Pull request:

https://github.com/theforeman/puppet-foreman/pull/846

Fixed in Releases:

Foreman - 2.1.0

Found in Releases:

Description

When specifying custom server certificates, the following options can be used:

    --foreman-server-ssl-ca /path/to/cacert.crt \
    --foreman-server-ssl-chain /path/to/cacert.crt \
    --foreman-server-ssl-cert /path/to/foreman.example.com.crt \
    --foreman-server-ssl-key /path/to/foreman.example.com.key \
    --foreman-server-ssl-crl "" \
    --foreman-websockets-ssl-cert /path/to/foreman.example.com.crt \
    --foreman-websockets-ssl-key /path/to/foreman.example.com.key \

In practice you almost always want the websockets cert + key to match the server cert + key. It would be easier for the user if this didn't need to be specified.

Associated revisions

Revision 2dc5e7d8 (diff)
Added by Ewoud Kohl van Wijngaarden 3 months ago

Fixes #29892 - Use server certs for websockets

Prior to this the user needed to specify the certs both for the server
and websockets. In practice these are pretty much always the same files.
By using undef + pick() the option to specify these is maintained, but
the defaults are better.