Jan,
When I check the help for --gen-server on 1.7 this is what I see:
rhn-ssl-tool --gen-server --help
Usage: rhn-ssl-tool [options]
If confused, please refer to the man page or other documentation
for sample usage.
Options:
--gen-server generate the web server's SSL key set, RPM and tar
archive. Review "--gen-server --help" for more
information.
--server-key=SERVER_KEY
the web server's SSL private key filename (default:
server.key)
--server-cert-req=SERVER_CERT_REQ
location of the web server's SSL certificate request
filename (default: server.csr)
-p PASSWORD, --password=PASSWORD
CA password
--ca-cert=CA_CERT CA certificate filename (default: RHN-ORG-TRUSTED-SSL-
CERT)
--ca-key=CA_KEY CA private key filename (default: RHN-ORG-PRIVATE-SSL-
KEY)
--startdate=STARTDATE
start date for the web server's SSL certificate
validity (format: YYMMDDHHMMSSZ - where Z is a letter;
default is 1 week ago: 121026155251Z)
--server-cert=SERVER_CERT
the web server SSL certificate filename (default:
server.crt)
...
This seems to be in conflict with what is in the man page, which as you say
makes no mention of --ca-cert under --gen-server.
Robert Boyd
Sr System Engineer | Peoplefluent
p. 919-645-2972 | c. 919-306-4681
e. [email protected]
Visit: www.peoplefluent.com | Read: Peoplefluent Blog
Follow: @peoplefluent | Download: iPad App
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Jan Pazdziora
Sent: Friday, November 02, 2012 11:52 AM
To: [email protected]
Subject: Re: [Spacewalk-list] rhn-ssl-tool inconsistency
On Fri, Nov 02, 2012 at 04:37:50PM +0100, Steve Meier wrote:
> Dear all,
>
> I am currently in the process of migrating my Spacewalk servers from
> self-signed to "trusted" certificates.
>
> I am using rhn-ssl-tool to build a new RPM with keys but encountered
> one problem. While the help and the man page say that there is a --ca-cert
> option it is not recognized when I call rhn-ssl-tool like this:
>
> [root@spacewalk ssl-build]# rhn-ssl-tool --gen-server --rpm-only
> --server-key=server.key --server-cert=server.crt
> --ca-cert=startssl-class2-server.pem
> usage: rhn-ssl-tool [options]
>
> rhn-ssl-tool: error: no such option: --ca-cert
>
> Am I doing something wrong or is there an inconsistency between code and
> documentation?
I can see the --ca-cert option only mentioned for --gen-ca, not for
--gen-server.
--
Jan Pazdziora
Principal Software Engineer, Satellite Engineering, Red Hat
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list
