When dealing with custom certs, the candlepin communication should not really be affected.
I would recommand checking, what's runnin on port 8443: netstat -tulpan | grep 8443 check which cert it is using: openssl s_client -connect $(hostname -f):8443 | openssl x509 -text -noout | less Also, could you write what commands exactly have you run, for further investigation? -- Ivan On Mon, Aug 15, 2016 at 10:00 PM, Ciarán Taog <[email protected]> wrote: > I am getting the following errors just after logging into katello after > installing certificates signed by our internal authority. > > Oops, we're sorry but something went wrong > Katello::Resources::Candlepin::OwnerInfo: SSL_connect returned=1 errno=0 > state=SSLv3 read server certificate B: certificate verify failed (GET > /candlepin/owners/Default_Organization/info) > > > RestClient::SSLCertificateNotVerified > Katello::Resources::Candlepin::OwnerInfo: SSL_connect returned=1 errno=0 > state=SSLv3 read server certificate B: certificate verify failed (GET > /candlepin/owners/Default_Organization/info) > > > I used the instructions provided here: > https://github.com/Katello/katello-installer#certificates > > I've also tried the workaround mentioned in > https://bugzilla.redhat.com/show_bug.cgi?id=1218251#c0 > > katello-certs-check reported everything was fine and I used the installer > commands it provided. It appears to have configured apache correctly to use > the new certs but some other piece apparently did not. I'm completely lost > as to which one given the error message. This is on a CentOS 7.2.1511 > system. Is there a way to determine which service (and it's cert) katello is > attempting to connect to? > > > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "Foreman users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/foreman-users. For more options, visit https://groups.google.com/d/optout.
