iptables Port Forwarding of TPS is Not Working in Red Hat Certificate System 8.1
Issue
- Custom middleware client requires that the URLs in the index.cgi of the phone home URL be running https and port 443.
- Currently, the URLs are http and on the unsecure TPS port.
- For example, here is an index.cgi file:
print "Content-type: text/xml\n\n";
print "<\?xml version=\"1.0\" encoding=\"UTF-8\"\?>";
print "<ServiceInfo>";
print "<IssuerName>";
print "Fedora Project"; # Vendor
print "</IssuerName>\n";
print "<Services>";
print "<Operation>";
print "http://sherman.mrb137.net:15080/nk_service";
print "</Operation>";
print "<UI>";
print "http://sherman.mrb137.net:15080/cgi-bin/home/enroll.cgi";
print "</UI>";
print "<EnrolledTokenBrowserURL>";
print "http://www.fedora.redhat.com"; # Company URL
print "</EnrolledTokenBrowserURL>";
print "<EnrolledTokenURL>";
print "</EnrolledTokenURL>";
print "<TokenType>";
print "userKey";
print "</TokenType>";
#print "<CAChainUI>";
#print "http://sherman.mrb137.net:15080/cgi-bin/home/cachain.cgi";
#print "</CAChainUI>";
print "</Services>";
print "</ServiceInfo>";
-
The URLs in question are in the
and blocks. -
The Port Forwarding described in the Red Hat Certificate System Admin Guide applies to the Admin, EE, and Agent pages.
-
Have tried also applying the same rules for the unsecure interface, but the same rules do not get us to https and 443.
-
The URLs in the index.cgi need to be https and 443. Looking for recommendations for the best way to accomplish this reconfiguration in TPS.
Environment
- Red Hat Certificate System 8.1
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.