Hi Adam,

Thankyou for your continuing help. I am using the same SSL certs for both 
the remote_proxy_dynflow_core and foreman-proxy (on the remote server) 
however the error still persits. I have pasted below the output for the 2 
config files on the remote-proxy that you mentioned:


[root@remoteproxy settings.d]# cat /etc/foreman-proxy/settings.yml
---
:settings_directory: /etc/foreman-proxy/settings.d
:ssl_certificate: /var/lib/puppet/ssl/certs/remoteproxy.xyz.dmz.pem
:ssl_ca_file: /var/lib/puppet/ssl/certs/ca.pem
:ssl_private_key: /var/lib/puppet/ssl/private_keys/remoteproxy.xyz.dmz.pem

# SSL settings for client authentication against foreman.
#:foreman_ssl_ca: /var/lib/puppet/ssl/certs/ca.pem
#:foreman_ssl_certificate: /var/lib/puppet/ssl/certs/foreman.xyz.com.pem
#:foreman_ssl_private_key: 
/var/lib/puppet/ssl/private_keys/foreman.xyz.com.pem

:trusted_hosts:
  - foreman-master.xyz.com
  - remoteproxy.xyz.dmz
:foreman_url: https://foreman-master.xyz.com
:daemon: true
:daemon_pid: /var/run/foreman-proxy/foreman-proxy.pid
:bind_host: '*'
#:http_port: 8000
:https_port: 8443
:log_file: /var/log/foreman-proxy/proxy.log
:log_level: DEBUG




[root@remoteproxy settings.d]# cat 
/etc/smart_proxy_dynflow_core/settings.yml
---
# Path to dynflow database, leave blank for in-memory non-persistent 
database
:database: /var/lib/foreman-proxy/dynflow/dynflow.sqlite
:console_auth: true

# URL of the foreman, used for reporting back
:foreman_url: https://foreman-master.xyz.com

# SSL settings for client authentication against foreman.
#:foreman_ssl_ca: /var/lib/puppet/ssl/certs/ca.pem
#:foreman_ssl_certificate: /var/lib/puppet/ssl/certs/foreman.xyz.com.pem
#:foreman_ssl_private_key: 
/var/lib/puppet/ssl/private_keys/foreman.xyz.com.pem

# Listen on address
:listen: 0.0.0.0

# Listen on port
:port: 8008

:use_https: true
:ssl_ca_file: /var/lib/puppet/ssl/certs/ca.pem
:ssl_certificate: /var/lib/puppet/ssl/certs/remoteproxy.xyz.dmz.pem
:ssl_private_key: /var/lib/puppet/ssl/private_keys/remoteproxy.xyz.dmz.pem

# File to log to, leave empty for logging to STDOUT
:log_file: /var/log/foreman-proxy/smart_proxy_dynflow_core.log

# Log level, one of UNKNOWN, FATAL, ERROR, WARN, INFO, DEBUG
:log_level: DEBUG


Also when i execute a job on the Foreman-master i see that it makes a 
connection to the remote-proxy (where i receive the ERROR -- : SSL 
certificate with unexpected serial supplied) error. Could you please let me 
know which SSL cert is being provided to the remote-proxy from the 
foreman-master? 

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to