[Satellite 6] After updating SSL certificates on Satellite 6.x server and installing the new version of the katello-ca-consumer-* package on Satellite clients, the Satellite clients can no longer access the repositories on the Satellite server.
Issue
After updating SSL certificates on Satellite 6.x server and installing the new version of the katello-ca-consumer package on Satellite clients, the Satellite clients can no longer access the repositories on the Satellite server. The updated SSL certificates have been deployed on the Satellite server (following the directions in the Red Hat Satellite documentation) using the satellite-installer command that has been provided in the output from the following command:
# katello-certs-check \
-c /root/satellite_cert/satellite_cert.pem \
-k /root/satellite_cert/satellite_cert_key.pem \
-b /root/satellite_cert/ca_cert_bundle.pem
Where:
- /root/satellite_cert/satellite_cert.pem is the path to the Satellite Server certificate file that is signed by a Certificate Authority.
- /root/satellite_cert/satellite_cert_key.pem is the path to the private key that was used to sign the Satellite Server certificate.
- /root/satellite_cert/ca_cert_bundle.pem is the path to the Certificate Authority bundle.
Environment
- Red Hat Satellite 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.