[Spacewalk-list] Can rhn-org-trusted-ssl-cert be renamed?

[Mark Prangnell]

Thanks Avi,

I shall look into that.

To change it server side, would it be a case of concatinating the various files you would normally put into RHN-ORG-TRUSTED-SSL-CERT into file with name of choosing and then generate the public CA cert package (running the rhn_ssl-dbstore command)  just using the different file name instead?

Cheers,

-----Original Message-----
From: spacewalk-list-bounces at redhat.com <spacewalk-list-bounces at redhat.com> On Behalf Of Avi Miller
Sent: 21 November 2018 19:45
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] Can rhn-org-trusted-ssl-cert be renamed?

This mail originated from OUTSIDE the TalkTalk Group PLC Corporate Network. Treat hyperlinks and attachments in this email with caution.




Hey Mark,

> On 22 Nov 2018, at 3:50 am, Mark Prangnell <mprangnell at talktalkplc.com> wrote:
>
> I’m in the process of writing some internal documentation ref usage and updating of ssl wildcard certs within my company with spacewalk and the question has been asked whether the ca-cert value (RHN-ORG-TRUSTED-SSL-CERT) can be set to something different (ie, more related to own company) or is the usage of the name RHN-ORG-TRUSTED-SSL-CERT hardcoded in some way in spacewalk?

It's possible to rename RHN-ORG-TRUSTED-SSL-CERT on the clients but you'll have to then change the sslCACert value in /etc/sysconfig/rhn/up2date to point to the right certificate. This is supposed to work for osad as well, but you may need to manually set osa_ssl_cert in /etc/sysconfig/rhn/osad.conf manually as well.

And make sure that these values are still in place after any upgrade of the Spacewalk client, I guess. :)

Cheers,
Avi

--
Oracle <https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.oracle.com&data=02%7C01%7Cmprangnell%40talktalkplc.com%7C2833fe9f62c049fb39fd08d64fea08f4%7Cd481b6128d2a409f97389508185d1a50%7C0%7C0%7C636784263942558824&sdata=c3rOiYdQTBT%2Fct%2FeodAU8Y6jcxOAdcWLJUw0I4eVwqw%3D&reserved=0>
Avi Miller | Product Management Director | +61 (3) 8616 3496 Oracle Linux and Virtualization
417 St Kilda Road, Melbourne, Victoria 3004 Australia


_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com
https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.redhat.com%2Fmailman%2Flistinfo%2Fspacewalk-list&data=02%7C01%7Cmprangnell%40talktalkplc.com%7C2833fe9f62c049fb39fd08d64fea08f4%7Cd481b6128d2a409f97389508185d1a50%7C0%7C0%7C636784263942558824&sdata=Va4Jh2u0sVd2WWIYuVyZJwc2ckcYpzDSy6OVb3I%2FSp0%3D&reserved=0
##############################################################################
This communication together with any attachments transmitted with it
("this E-Mail") is intended only for the use of the addressee and may contain
information which is privileged and confidential. If the reader of this E-Mail
is not the intended recipient or the employee or agent responsible for
delivering it to the intended recipient you are hereby notified that any use,
dissemination, forwarding, printing or copying of this E-Mail is strictly
prohibited. Addressees should check this E-mail for viruses. The Company makes
no representations as regards the absence of viruses in this E-Mail. If you
have received this E-Mail in error please notify our IT Service Desk
immediately by e-mail at abuse.ttb at talktalkplc.com Please then immediately
delete, erase or otherwise destroy this E-Mail and any copies of it.

Any opinions expressed in this E-Mail are those of the author and do not
necessarily constitute the views of the Company. Nothing in this E-Mail shall
bind the Company in any contract or obligation.

For the purposes of this E-Mail "the Company" means TalkTalk Telecom Group PLC
and/or any of its subsidiaries.

Please feel free to visit our website: www.talktalkgroup.com 

TalkTalk Telecom Group Plc (Registered in England & Wales No. 7105891)
11 Evesham Street, London W11 4AR
##############################################################################