<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> I ran into a similar issue. I ended up using the “—force-own-ca” flag. <div class=""><br class=""> </div> <div class=""><a href="https://www.redhat.com/archives/spacewalk-list/2011-December/msg00147.html" class="">https://www.redhat.com/archives/spacewalk-list/2011-December/msg00147.html</a></div> <div class=""><br class=""> <div class=""><br class=""> </div> <div class=""><br class=""> <div> <blockquote type="cite" class=""> <div class="">On May 5, 2016, at 8:53 AM, Daryl Rose <<a href="mailto:darylrose@outlook.com" class="">darylrose@outlook.com</a>> wrote:</div> <br class="Apple-interchange-newline"> <div class=""> <div id="divtagdefaultwrapper" style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-size: 12pt; background-color: rgb(255, 255, 255); font-family: Calibri, Arial, Helvetica, sans-serif;" class=""> <div style="margin-top: 0px; margin-bottom: 0px;" class="">I am trying to stand up a proxy server. However, I am having issues with the certificate.</div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class=""> </div> <div style="margin-top: 0px; margin-bottom: 0px;" class="">I am using a CA signed certificate on the primary SW server. Proxy installation prompts me copy over three certificate items from the primary SW server.</div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><br class=""> </div> <blockquote style="margin: 0px 0px 0px 40px; border: none; padding: 0px;" class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class="">[root@ ssl-build]# configure-proxy.sh</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class="">Using RHN parent (from /etc/sysconfig/rhn/up2date): <spacewalk server></div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class="">Using CA Chain (from /etc/sysconfig/rhn/up2date): /usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class="">Please do copy your CA key and public certificate from <spacewalk server> to</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class="">/root/ssl-build directory. You may want to execute this command:</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class=""> scp 'root@<spacewalk server>:/root/ssl-build/{RHN-ORG-PRIVATE-SSL-KEY,RHN-ORG-TRUSTED-SSL-CERT,rhn-ca-openssl.cnf}' /root/ssl-build</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div class=""></div> <br class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div style="margin-top: 0px; margin-bottom: 0px;" class="">I have <span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">RHN-ORG-PRIVATE-SSL-KEY and RHN-ORG-TRUSTED-SSL-CERT, but I don't have a <span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">rhn-ca-openssl.cnf file. If I try to install without that file I get the following error:</span></span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><br class=""> </span></div> <blockquote style="margin: 0px 0px 0px 40px; border: none; padding: 0px;" class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">ERROR: can't find a file that should have been created during an earlier step:</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class=""> /root/ssl-build/rhn-ca-openssl.cnf</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class=""></div> <br class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">So, I tried creating one using the rhn-ssl-tool command: </span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><br class=""> </span></div> <blockquote style="margin: 0px 0px 0px 40px; border: none; padding: 0px;" class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">rhn-ssl-tool --gen-ca --password=MY_CA_PASSWORD --dir="/root/ssl-build" \ </div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">--set-state="North Carolina" --set-city="Raleigh" --set-org="Example Inc." \</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">--set-org-unit="SSL CA Unit"</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class=""></div> <div class=""><br class=""> </div> However, this did not work. I get the following error: <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><br class=""> </span></div> <blockquote style="margin: 0px 0px 0px 40px; border: none; padding: 0px;" class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">ERROR: web server's SSL certificate generation/signing failed:</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class=""><br class=""> </div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">Using configuration from /root/ssl-build/rhn-ca-openssl.cnf</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">CA certificate and CA private key do not match</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class="">139757325297480:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:331:</div> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""></span></span></p> <div class=""></div> <br class=""> <p style="margin-top: 0px; margin-bottom: 0px;" class=""></p> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">Any way to get around this error? Can I create the rhn-ca-openssl.cnf file from the existing cert? </span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><br class=""> </span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">Thank you.</span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class=""><br class=""> </span></div> <div style="margin-top: 0px; margin-bottom: 0px;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;" class="">Daryl</span></div> </div> <span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> <span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Spacewalk-list mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> <a href="mailto:Spacewalk-list@redhat.com" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Spacewalk-list@redhat.com</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></div> </blockquote> </div> <br class=""> </div> </div> </body> </html>