<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Arial;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
tt
{mso-style-priority:99;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle19
{mso-style-type:personal;
font-family:Calibri;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:Verdana;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:Verdana">Thanks! I’ll be testing all these ideas.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Verdana"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:Verdana">Chris<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Verdana"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black"><spacewalk-list-bounces@redhat.com> on behalf of Dimitri Yioulos <dyioulos@netatlantic.com><br>
<b>Reply-To: </b>"spacewalk-list@redhat.com" <spacewalk-list@redhat.com><br>
<b>Date: </b>Wednesday, May 31, 2017 at 4:12 PM<br>
<b>To: </b>"spacewalk-list@redhat.com" <spacewalk-list@redhat.com><br>
<b>Subject: </b>Re: [Spacewalk-list] Re-generating Spacewalk certs?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri;color:#1F497D">Also remember that “serverURL=” in the up2date file must match the CN.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:Calibri">From:</span></b><span style="font-size:11.0pt;font-family:Calibri"> spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com]
<b>On Behalf Of </b>William H. ten Bensel<br>
<b>Sent:</b> Wednesday, May 31, 2017 4:03 PM<br>
<b>To:</b> spacewalk-list@redhat.com<br>
<b>Subject:</b> Re: [Spacewalk-list] Re-generating Spacewalk certs?</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:Arial">I believe this can be done:<br>
<br>
Linux 6: update /etc/hosts, /etc/sysconfig/network and hostname with what you want it to be. </span><br>
<span style="font-size:10.0pt;font-family:Arial">Linux 7: update /etc/hosts and /etc/hostname<br>
</span><br>
<span style="font-size:10.0pt;font-family:Arial">Then regenerate the SSL.</span><br>
<br>
<br>
<span style="font-size:10.0pt;font-family:Arial">- Thanks and good luck</span><br>
<br>
<br>
<br>
<span style="font-size:7.5pt;font-family:Arial;color:#5F5F5F">From: </span><span style="font-size:7.5pt;font-family:Arial">"Fouts, Christopher" <<a href="mailto:Christopher.Fouts@Teradata.com">Christopher.Fouts@Teradata.com</a>></span><br>
<span style="font-size:7.5pt;font-family:Arial;color:#5F5F5F">To: </span><span style="font-size:7.5pt;font-family:Arial">"<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>" <<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>></span><br>
<span style="font-size:7.5pt;font-family:Arial;color:#5F5F5F">Date: </span><span style="font-size:7.5pt;font-family:Arial">05/31/2017 02:55 PM</span><br>
<span style="font-size:7.5pt;font-family:Arial;color:#5F5F5F">Subject: </span><span style="font-size:7.5pt;font-family:Arial">Re: [Spacewalk-list] Re-generating Spacewalk certs?</span><br>
<span style="font-size:7.5pt;font-family:Arial;color:#5F5F5F">Sent by: </span><span style="font-size:7.5pt;font-family:Arial"><a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a></span><o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" noshade="" style="color:#A0A0A0" align="center">
</div>
<p class="MsoNormal"><br>
<br>
<br>
This email originated from outside of the company. Please use discretion if opening attachments or clicking on links.<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" align="center">
</div>
<p class="MsoNormal"> <br>
<span style="font-family:Verdana">Thanks. I believe that spacewalk-setup just calls the rhn-ssl.</span><br>
<span style="font-family:Verdana"> </span><br>
<span style="font-family:Verdana">For AWS instances, hostname is usually ip-10-xx-xx-xx.ec2.instance for example. I do however, put a load balancer in front of my AWS instance, and create a Route 53 CNAME, for exmpale, td-spacewalk.company.com. I want the Certs
to have the td-spacewalk.company.com as CN, instead of ip-10-xx-xx-xx.ec2.instance.</span><br>
<span style="font-family:Verdana"> </span><br>
<span style="font-family:Verdana">Chris</span><br>
<span style="font-family:Verdana"> </span><br>
<b><span style="font-family:Calibri">From: </span></b><span style="font-family:Calibri"><<a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a>> on behalf of Dimitri Yioulos <<a href="mailto:dyioulos@netatlantic.com">dyioulos@netatlantic.com</a>><b><br>
Reply-To: </b>"<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>" <<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>><b><br>
Date: </b>Wednesday, May 31, 2017 at 3:30 PM<b><br>
To: </b>"<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>" <<a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a>><b><br>
Subject: </b>Re: [Spacewalk-list] Re-generating Spacewalk certs?</span><br>
<br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080">Chris,</span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080"> </span><br>
<span style="font-family:Calibri">1. </span><span style="font-size:10.0pt;font-family:Calibri;color:#004080">I think you can use rhn-ssl to generate the new cert. See </span><a href="https://access.redhat.com/solutions/10809"><span style="font-size:10.0pt;font-family:Calibri;color:#0082BF">https://access.redhat.com/solutions/10809</span></a><span style="font-size:10.0pt;font-family:Calibri;color:#004080">.</span><br>
<span style="font-family:Calibri">2. </span><span style="font-size:10.0pt;font-family:Calibri;color:#004080">CN should be the fqdn of your spacewalk server.</span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080"> </span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080">HTH</span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080"> </span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080">Dimitri</span><br>
<span style="font-size:10.0pt;font-family:Calibri;color:#004080"> </span><br>
<b><span style="font-size:10.0pt;font-family:Calibri">From:</span></b><span style="font-size:10.0pt;font-family:Calibri">
<a href="mailto:spacewalk-list-bounces@redhat.com">spacewalk-list-bounces@redhat.com</a> [</span><a href="mailto:spacewalk-list-bounces@redhat.com"><span style="font-size:10.0pt;font-family:Calibri">mailto:spacewalk-list-bounces@redhat.com</span></a><span style="font-size:10.0pt;font-family:Calibri">]
<b>On Behalf Of </b>Fouts, Christopher<b><br>
Sent:</b> Wednesday, May 31, 2017 2:41 PM<b><br>
To:</b> <a href="mailto:spacewalk-list@redhat.com">spacewalk-list@redhat.com</a><b><br>
Subject:</b> [Spacewalk-list] Re-generating Spacewalk certs?</span><br>
<span style="font-family:Calibri"> </span><br>
<span style="font-size:13.5pt;font-family:Verdana">I have two questions regaring SW certs?</span><br>
<span style="font-family:Calibri">1. </span><span style="font-size:13.5pt;font-family:Verdana">How can I regenerate certs, just by running spacewalk-setup, and simply don’t touch the DB?</span><br>
<span style="font-family:Calibri">2. </span><span style="font-size:13.5pt;font-family:Verdana">If using an answer file, how do I set the common name (CN)?</span><br>
<span style="font-size:13.5pt;font-family:Verdana"> </span><br>
<span style="font-size:13.5pt;font-family:Verdana">Thanks,</span><br>
<span style="font-size:13.5pt;font-family:Verdana">Chris</span><tt><span style="font-size:10.0pt">This email originated from outside of the company. Please use discretion if opening attachments or clicking on links.</span></tt><span style="font-size:10.0pt;font-family:"Courier New""><br>
<br>
<tt>_______________________________________________</tt><br>
<tt>Spacewalk-list mailing list</tt><br>
<tt><a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a></tt><br>
</span><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list"><tt><span style="font-size:10.0pt">https://www.redhat.com/mailman/listinfo/spacewalk-list</span></tt></a><br>
<br>
<br>
<br>
**<br>
<br>
<br>
<br>
This email and any attachments may contain information that is confidential and/or privileged for the sole use of the intended recipient. Any use, review, disclosure, copying, distribution or reliance by others, and any forwarding of this email or its contents,
without the express permission of the sender is strictly prohibited by law. If you are not the intended recipient, please contact the sender immediately, delete the e-mail and destroy all copies.<br>
<br>
**<o:p></o:p></p>
</div>
</body>
</html>