Plugins » Katello

settings.yml for the foreman proxy needs separate certificates to talk to Foreman as a client (luckily we create the RPM and it even ends up on the capsule, we just don't do anything with it).

Otherwise when using the templates plugin, proxy can't request it over SSL as it's Proxy certificate is only a Server certificate.

SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL3 alert read:fatal:unsupported certificate
SSL_connect:failed in SSLv3 read server session ticket A
139936624129864:error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate:s3_pkt.c:1257:SSL alert number 43
139936624129864:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:184: