[Spacewalk-list] Custom SSL cert?

[Eric Heydrick]

I ran into a similar issue with osa-dispatcher and decided to not use it. 
It also doesn't appear to support certs with subjectAltNames so talking to 
jabber with anything but the CN in the cert fails. 

What is saying the cert is expired? Your browser or Spacewalk itself? If 
it's the browser did you try restarting it? I've seen browsers get 
confused when the server cert is changed.

My cert has a regular CN not a wildcard but that should work as far as I 
know. 

-Eric

On Tue, 27 Jul 2010, Daniel Wittenberg wrote:

> Ok went through the instructions and osa-dispatcher won't start, 
> claiming the cert is invalid and when I try to do the last step by 
> logging in to the website it says the cert is expired and won't let me 
> login.  If I manually use openssl to check the certs they are ok, but, 
> it is a wildcard cert, *.example.com.  Anyone used a wildcard with it, 
> or should I just do a new self-signed one?
> 
> Dan
> 
> 
> On Jul 26, 2010, at 11:59 PM, Eric Heydrick wrote:
> 
> > On Mon, 26 Jul 2010, Daniel Wittenberg wrote:
> > 
> >> Our SSL cert just expired so I thought I would just use our real 
> >> wildcard cert but couldn't find a good guide on how to either replace 
> >> the self-signed one or how to use your own.  Is there a guide somewhere 
> >> on how to update the SSL cert?
> > 
> > I use my own CA and I followed the guide at 
> > http://unfuckablelinux.com/2008/07/02/spacewalk-and-avoiding-self-signed-certificates/ 
> > to install the certs.
> > 
> > -Eric
> > 
> > _______________________________________________
> > Spacewalk-list mailing list
> > Spacewalk-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> 
> 
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>