[Spacewalk-list] [External] : SSL certificate fun

Peirce, Dean Dean.Peirce at cengage.com
Wed Feb 3 16:09:19 UTC 2021


Thanks Avi!

On Feb 2, 2021, at 10:27 PM, Avi Miller <avi.miller at oracle.com<mailto:avi.miller at oracle.com>> wrote:

Our docs on replacing the SSL certificates has gone through extensive QA and might be useful as a reference: https://docs.oracle.com/en/operating-systems/oracle-linux-manager/2.10/install/chap-server-instup.html#replace-cert<https://urldefense.com/v3/__https://docs.oracle.com/en/operating-systems/oracle-linux-manager/2.10/install/chap-server-instup.html*replace-cert__;Iw!!MXVguWEtGgZw!eRA5d467HFtfOxCU2nZONWl6rfrL5jvdp3tnVoYpIote8VrKuf8ZjiwjHHVegGi-BQ$>


From: <spacewalk-list-bounces at redhat.com<mailto:spacewalk-list-bounces at redhat.com>> on behalf of "Peirce, Dean" <Dean.Peirce at cengage.com<mailto:Dean.Peirce at cengage.com>>
Reply to: "spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>" <spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>>
Date: Wednesday, 3 February 2021 at 10:28 am
To: "spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>" <spacewalk-list at redhat.com<mailto:spacewalk-list at redhat.com>>
Subject: [External] : [Spacewalk-list] SSL certificate fun

Hi all,
Its that time of year again, and we renewed our SSL cert for our spacewalk server.
This year Jabberd won’t stay running for more than a second. I’m assuming that I missed a cert file somewhere, but I still cannot get jabber to cooperate.
I’ve added the new cert files in:
/etc/httpd/conf/…
/etc/pki/spacewalk/jabberd/
/var/www/html/pub
/usr/share/rhn/
sm.log shows:
Tue Feb  2 11:23:42 2021 [notice] version: jabberd sm 2.6.1
Tue Feb  2 11:23:42 2021 [notice] [spacewalk.stage.name.com<https://urldefense.com/v3/__http:/spacewalk.stage.name.com__;!!GqivPVa7Brio!LQV8E4yLhjX3tRnmCfgHXvOYVvV7AT1jLP7bf1-Z5XgzlFus2DgrZrkMorLe9cpD$>] configured
Tue Feb  2 11:23:42 2021 [notice] [spacewalk.stage.name.com<https://urldefense.com/v3/__http:/spacewalk.stage.name.com__;!!GqivPVa7Brio!LQV8E4yLhjX3tRnmCfgHXvOYVvV7AT1jLP7bf1-Z5XgzlFus2DgrZrkMorLe9cpD$>] configured
Tue Feb  2 11:23:42 2021 [notice] [localhost.localdomain] configured
Tue Feb  2 11:23:42 2021 [notice] attempting connection to router at xx.xxx.xx.xx: port=5347
Tue Feb  2 11:23:42 2021 [notice] shutting down
Tue Feb  2 11:23:42 2021 [notice] connection to router closed

c2s.log
Tue Feb  2 11:23:42 2021 [notice] initialized auth module 'sqlite'
Tue Feb  2 11:23:42 2021 [notice] starting up
Tue Feb  2 11:23:42 2021 [info] process id is 1628, written to /var/lib/jabberd/pid/c2s.pid
Tue Feb  2 11:23:42 2021 [notice] [spacewalk.stage.name.com<https://urldefense.com/v3/__http:/spacewalk.stage.name.com__;!!GqivPVa7Brio!LQV8E4yLhjX3tRnmCfgHXvOYVvV7AT1jLP7bf1-Z5XgzlFus2DgrZrkMorLe9cpD$>] configured; realm=, authreg=sqlite, registration enabled, using PEM:/etc/pki/spacewalk/jabberd/server.pem
Tue Feb  2 11:23:42 2021 [notice] attempting connection to router at xx.xxx.xx.xx, port=5347
Tue Feb  2 11:23:42 2021 [notice] shutting down
Tue Feb  2 11:23:42 2021 [notice] connection to router closed

s2s.log
Tue Feb  2 11:23:42 2021 [notice] starting up (interval=120, queue=60, keepalive=120, idle=200)
Tue Feb  2 11:23:42 2021 [info] process id is 1620, written to /var/lib/jabberd/pid/s2s.pid
Tue Feb  2 11:23:42 2021 [notice] attempting connection to router at xx.xxx.xx.xx, port=5347
Tue Feb  2 11:23:42 2021 [notice] [6] [router] write error: Connection refused (111)
Tue Feb  2 11:23:42 2021 [notice] connection to router closed


Thanks in advance for any assistance

Dean
_______________________________________________
Spacewalk-list mailing list
Spacewalk-list at redhat.com<mailto:Spacewalk-list at redhat.com>
https://urldefense.com/v3/__https://www.redhat.com/mailman/listinfo/spacewalk-list__;!!MXVguWEtGgZw!eRA5d467HFtfOxCU2nZONWl6rfrL5jvdp3tnVoYpIote8VrKuf8ZjiwjHHXvBqUx2Q$

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20210203/1b09895f/attachment.htm>


More information about the Spacewalk-list mailing list