Hello Ivan,
thank you for reply. I send you the output of that commands:
Am Dienstag, 12. Juli 2016 09:00:27 UTC+2 schrieb Ivan Necas:
>
> Hi,
>
> Would you mind sharing the output of the following commands:
>
> openssl x509 -in /etc/foreman-proxy/ssl_cert.pem -text -noout
> openssl s_client -connect $(hostname):9090
> openssl verify -CAfile /etc/foreman/proxy_ca.pem
> /etc/foreman-proxy/ssl_cert.pem
>
> What I'm looking for especially is if the CN is matching the host fqdn
> and if the corresponding
> ca verifies it.
>
> -- Ivan
>
> On Tue, Jul 12, 2016 at 7:54 AM, 'Denis Müller' via Foreman users
> <[email protected] <javascript:>> wrote:
> > I had custom repositories of Epel and so on. So after replacing it with
> > default repos it worked, im able to install katello. BUT if i run
> > "foreman-installer --scenario katello" it fails all the time.
> > The OS is CentOS 7.1 and it is fresh installed system.
> > ^C[root@katello ~]# foreman-installer --scenario katello
> > Proxy katello.nodes.rto.de cannot be registered (422 Unprocessable
> Entity):
> > Unable to communicate with the proxy: ERF12-2530
> [ProxyAPI::ProxyException]:
> > Unable to detect features ([OpenSSL::SSL::SSLError]: SSL_connect
> returned=1
> > errno=0 state=SSLv3 read server certificate B: certificate verif...) for
> > proxy https://katello.nodes.rto.de:9090/features Please check the proxy
> is
> > configured and running on the host.
> >
> > /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[
> katello.nodes.rto.de]/ensure:
> > change from absent to present failed: Proxy katello.nodes.rto.de cannot
> be
> > registered (422 Unprocessable Entity): Unable to communicate with the
> proxy:
> > ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features
> > ([OpenSSL::SSL::SSLError]: SSL_connect returned=1 errno=0 state=SSLv3
> read
> > server certificate B: certificate verif...) for proxy
> > https://katello.nodes.rto.de:9090/features Please check the proxy is
> > configured and running on the host.
> >
> > /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[
> katello.nodes.rto.de]:
> > Failed to call refresh: Proxy katello.nodes.rto.de cannot be registered
> > (ApipieBindings::MissingArgumentsError: id): N/A
> >
> > /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[
> katello.nodes.rto.de]:
> > Proxy katello.nodes.rto.de cannot be registered
> > (ApipieBindings::MissingArgumentsError: id): N/A
> > Installing Done
> > [100%]
> >
> [...............................................................................................................................]
>
>
> > Something went wrong! Check the log for ERROR-level output
> > The full log is at /var/log/foreman-installer/katello.log
> >
> >
> >
> >
> > Am Freitag, 8. Juli 2016 11:21:38 UTC+2 schrieb Marvin Beckers:
> >>
> >> Hello Denis,
> >>
> >> it might be helpful to provide logfiles in English since that's the
> >> language most people on this mailing list have in common. Not everyone
> >> speaks German. What command exactly are you running? Is that the output
> of
> >> `yum install katello`? What repositories have you configured?
> >>
> >> Marvin
> >>
> >> Am Freitag, 8. Juli 2016 10:41:22 UTC+2 schrieb Denis Müller:
> >>>
> >>> Hi,
> >>>
> >>> i was trying to install "katello.noarch 0:3.0.0-9.el7" but no luck
> here.
> >>> Installation can not resolve all dependencies, is it a bug? See
> install.log.
> >>> I would appreciate any help.
> >>>
> >>> Best regards,
> >>>
> >>> Denis
> >
> > --
> > You received this message because you are subscribed to the Google
> Groups
> > "Foreman users" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an
> > email to [email protected] <javascript:>.
> > To post to this group, send email to [email protected]
> <javascript:>.
> > Visit this group at https://groups.google.com/group/foreman-users.
> > For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.
[root@katello ~]#
[root@katello ~]# openssl x509 -in /etc/foreman-proxy/ssl_cert.pem -text -noout
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9236111937527640121 (0x802d42df46147039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, ST=North Carolina, L=Raleigh, O=Katello, OU=SomeOrgUnit,
CN=katello.nodes.rto.de
Validity
Not Before: Jul 4 18:56:40 2016 GMT
Not After : Jul 6 18:56:41 2036 GMT
Subject: C=US, ST=North Carolina, O=FOREMAN, OU=SMART_PROXY,
CN=katello.nodes.rto.de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:af:38:4d:44:62:5c:b2:21:1d:36:0b:52:fd:93:
82:77:c2:6b:f8:5d:9b:2b:ad:54:04:f2:b6:e7:86:
95:3b:cc:f2:7e:9c:9b:3c:13:01:22:10:67:e3:0e:
59:03:b3:a7:c3:f1:b8:85:60:68:f8:68:e1:91:0d:
1a:b2:fe:d0:d3:75:1a:4b:b6:11:8a:f3:7a:62:b3:
46:39:bf:c3:2d:b9:83:3f:ea:21:74:6a:eb:f9:90:
d7:5a:cd:ac:9f:67:c9:b1:fe:c1:9d:41:d3:2b:e1:
1c:01:8b:1a:02:d3:c2:c2:3f:10:c7:6d:30:8e:68:
47:37:a2:72:c7:4f:43:a0:b9:42:5f:76:f4:40:85:
f1:c1:86:34:37:59:a8:90:cb:8d:97:a9:35:a4:17:
0e:42:5a:a6:9e:4b:75:2e:d3:f6:89:1e:38:e3:a2:
f3:6b:6f:cc:91:48:a4:9e:b8:58:5a:d4:97:25:41:
0d:ed:d5:9d:0a:f8:d2:4c:7c:f8:a7:cd:c8:b8:82:
e2:d9:1a:0b:99:76:f4:18:84:6d:96:f1:b6:d7:09:
a1:1d:b7:10:23:69:38:d1:b1:e8:7b:81:d3:0f:e6:
05:64:d7:a8:10:1c:8d:cf:9e:be:0c:bc:26:d4:b4:
85:c7:30:66:eb:4f:f4:0b:96:e2:91:4a:53:46:3d:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
Netscape Cert Type:
SSL Server
Netscape Comment:
Katello SSL Tool Generated Certificate
X509v3 Subject Key Identifier:
EA:92:A1:09:56:C3:96:04:7D:BA:5E:DB:B7:F3:6C:08:2C:0D:D7:BC
X509v3 Authority Key Identifier:
keyid:39:F2:36:38:41:8F:78:B9:7A:A1:42:B7:D4:EE:9A:BA:E9:6B:DA:9D
DirName:/C=US/ST=North
Carolina/L=Raleigh/O=Katello/OU=SomeOrgUnit/CN=katello.nodes.rto.de
serial:80:2D:42:DF:46:14:70:32
X509v3 Subject Alternative Name:
DNS:katello.nodes.rto.de
Signature Algorithm: sha256WithRSAEncryption
23:72:74:df:bf:56:a4:fc:cf:39:13:7e:52:64:d0:22:c1:ef:
95:7c:de:a6:60:6d:26:61:db:62:a5:46:92:25:1d:51:1c:d6:
d9:a1:7b:5e:06:ea:c0:7f:3c:8c:19:b4:06:ad:02:ed:51:13:
b2:9b:e7:d8:f6:a2:5e:83:1b:78:39:6f:2e:5a:44:89:c4:12:
2a:12:c2:d5:95:94:3e:1a:97:4a:7a:0e:8e:6b:44:79:30:1d:
4a:59:b5:3a:b8:63:ec:b0:8a:2e:3b:cf:59:a6:cb:66:86:20:
4e:49:da:08:68:48:e9:3b:e7:82:0c:c9:16:92:0b:de:ed:c3:
48:a7:cd:21:78:88:b4:fb:ac:a9:60:eb:3d:53:b0:8b:d2:4a:
f9:bb:02:ce:b7:3d:c0:fc:cd:b2:9d:a3:00:5c:f0:28:17:dd:
36:f8:7f:56:a4:6b:9a:c8:8b:b3:de:fb:67:60:cf:08:07:69:
96:b9:95:16:25:e4:d8:99:ec:4c:d2:5e:87:1f:06:e4:0d:ca:
aa:07:2e:58:26:b3:22:49:da:83:fa:74:57:c6:c5:55:c0:25:
c2:f7:00:b6:6e:80:8c:c9:04:9f:6a:f3:85:d0:bd:97:20:76:
cd:63:5f:2d:5b:32:1c:ef:4f:f9:bb:94:d5:c0:ee:1d:7b:1a:
fd:14:ac:7a
[root@katello ~]#
[root@katello ~]#
[root@katello ~]#
[root@katello ~]# openssl s_client -connect $(hostname):9090
CONNECTED(00000003)
depth=0 O = 38a0732838e5dac68cc781a84805a758, CN = katello.nodes.rto.de
verify error:num=18:self signed certificate
verify return:1
depth=0 O = 38a0732838e5dac68cc781a84805a758, CN = katello.nodes.rto.de
verify return:1
---
Certificate chain
0 s:/O=38a0732838e5dac68cc781a84805a758/CN=katello.nodes.rto.de
i:/O=38a0732838e5dac68cc781a84805a758/CN=katello.nodes.rto.de
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/O=38a0732838e5dac68cc781a84805a758/CN=katello.nodes.rto.de
issuer=/O=38a0732838e5dac68cc781a84805a758/CN=katello.nodes.rto.de
---
No client certificate CA names sent
Server Temp Key: ECDH, secp521r1, 521 bits
---
SSL handshake has read 1450 bytes and written 441 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 6ED978D6909F9E0C3D0B4B0D7B0D213522762B8AAD1AF978E009D638B5A43922
Session-ID-ctx:
Master-Key:
9AE883B08FB94EB24742FA474193BA44C735D5A24996112BB3814C88E172668D3F6585D9B5DFFF84FD06F3100E4A51A0
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
Start Time: 1468308260
Timeout : 300 (sec)
Verify return code: 18 (self signed certificate)
---
closed
[root@katello ~]# openssl verify -CAfile /etc/foreman/proxy_ca.pem
/etc/foreman-proxy/ssl_cert.pem
/etc/foreman-proxy/ssl_cert.pem: OK
