Hi James, the files should be set properly on the host where the separate proxy runs.
I asked around and found out the foreman-proxy and smart_proxy_dynflow_core have to be configured to use the same certificate to talk to each other, however weird it may sound. If they use different SSL certificates (even if they are signed by the same CA), you will get the unexpected serial error. Are you by any chance having them use different certs? -- Adam On Mon, Sep 25, 2017 at 12:31 PM, James Denton <[email protected]> wrote: > Hi Adam > > > Thanks for your help (apologies I didnt respond sooner i was away last > week). The settings in the .yaml files you mention appear correct as far as > I know. Just so you know i am attempting to run a remote job from our > Foreman master server to a client via a smart-proxy running on a seperate > server in isolation. Therefore with the 2 files you mention do you mean on > our Foreman master server or the seperate Proxy. This is from the error log > on the foreman-proxy server running seperate from Foreman master: > > D, [2017-09-25T11:24:58.230191 ] DEBUG -- : accept: 10.10.240.195:46416 > D, [2017-09-25T11:24:58.232804 ] DEBUG -- : Rack::Handler::WEBrick is > invoked. > [2017-09-25 11:24:58.331 #59264] ERROR -- invalid worlds found > {"8f03b9ac-d048-41a1-b25b-49b24d5e2594"=>:invalidated} > E, [2017-09-25T11:24:58.358327 #59264] ERROR -- : SSL certificate with > unexpected serial supplied > [2017-09-25 11:24:58.361 #59264] INFO -- 10.10.240.195 - - > [25/Sep/2017:11:24:58 +0100] "GET /dynflow/tasks/count?state=running > HTTP/1.1" 403 59 0.0037 > > [2017-09-25 11:24:58.403 #59264] DEBUG -- close: 10.10.240.195:46416 > > > 10.10.240.195 is the IP of the Foreman Master. > > Thanks! > > James > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Foreman users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/foreman-users. For more options, visit https://groups.google.com/d/optout.
