I figured it out thanks to the command 

openssl s_client -connect 127.0.0.1:443 -showcerts


One of my intermediate certs I apparently forgot to replace.  Fixed and all is 
well with the world again!


Shawn Cannon


---- On Mon, 11 Aug 2014 07:51:36 -0400 Shawn 
Cannon<[email protected]> wrote ---- 


Digicert is the CA.  I am using my wildcard cert.  Reverse and forward DNS 
lookup are fine.

Shawn Cannon


---- On Sun, 10 Aug 2014 14:27:19 -0400 Paul Robert Marino 
<[email protected]> wrote ---- 


1 Who as in what CA signed the new cert
2 is reverse as well as forward DNS lookup returning identical mappings of the 
hostnames to the IP on the host you are trying to use whet on. 

That kind off SSL issue usually is not spacewalk specific, but usually are the 
same things that foul up any SSL cert.
-- Sent from my HP Pre3

On Aug 7, 2014 5:07 PM, Shawn Cannon <[email protected]> wrote: 

I replaced my certificate for the web GUI and it shows up properly with the 
proper expiration date in 2016.  When I run rhn_check from a client, it tells 
me my cert is expired.  I am using a cert obtained from an external CA and I am 
confused as to which cert it thinks has expired.  I run a wget to grab the 
RHN-ORG-TRUSTED-SSL-CERT file from  my spacewalk server and it tells me that 
the certificate is expired!  Does wget not connect to the same https that the 
GUI would use?  Why would one report the cert as fine and one as expired?  I 
need some guidance on how to fix this please.  Thanks!

Shawn Cannon

_______________________________________________ 
Spacewalk-list mailing list 
[email protected] 
https://www.redhat.com/mailman/listinfo/spacewalk-list

_______________________________________________ 
Spacewalk-list mailing list 
[email protected] 
https://www.redhat.com/mailman/listinfo/spacewalk-list



_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

Reply via email to