I don't, I only discovered it recently and mentally flagged it under the existing issue.
Its easy to diagnose. do an openssl s_client and look at the cert chain it provides. its the custom-cert with the default's chain. On Sun, Nov 20, 2016 at 8:59 PM Andrew Schofield <[email protected]> wrote: > > > On Sunday, November 20, 2016 at 12:54:51 PM UTC-5, Danny Kimsey wrote: > > External certs don't work correctly. Its an outstanding issue. Somewhere > on foreman's issue tracker is a ticket talking about this. I outlined a few > things I did, but found out that at least one step breaks another further > downstream. > > Basically comes down to the fact that Katello needs to build two top-level > CAs and use them accordingly one for the "custom" certs and one for the > "default" based certs. Until that happens I don't see all the cert issues > being resolved correctly. > > > We're running Satellite 6.2 with custom certs and everything works (well, > see the note below!): > > > For example, I have a working instance after some cert shuffling and root > CA updates. But the moment I installed the components for docker image > repositories, the $capsule:5000 vhost has the wrong cert chain. > > > I *suspect* we are hitting this - do you know a BZ or tracker ID? > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Foreman users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/foreman-users/2xZEhwYha4Q/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout. > -- -- Danny. Beware! The mind of the believer stagnates. It fails to grow outward into an unlimited, infinite universe. Frank Herbert, Heretics of Dune -- You received this message because you are subscribed to the Google Groups "Foreman users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/foreman-users. For more options, visit https://groups.google.com/d/optout.
