The installation process for custom CA-signed certificates on Red Hat Satellite and Capsule fails due to an error related to invalid parameters.
Issue
-
The installation process for custom CA-signed certificates on Red Hat satellite and Capsule fails due to an error related to invalid parameters. Specifically, the values for the certs-server-cert, certs-server-ca-cert, and certs-server-key parameters do not match the required regular expression patterns. These patterns are designed to validate the format of the provided values.
-
An error is encountered during the process of
regeneratingSSL certificates. -
The attempt to create a certificate archive using custom certificates fails for the
Red Hat capsuleserver.# satellite-installer --scenario satellite --certs-server-cert "satellite_cert.pem" --certs-server-key "satellite_cert_key.pem" --certs-server-ca-cert "ca_cert_bundle.pem" --certs-update-server --certs-update-server-ca 2023-05-22 12:57:22 [ERROR ] [root] Parameter certs-server-cert invalid: satellite_cert.pem is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-05-22 12:57:22 [ERROR ] [root] Parameter certs-server-key invalid: "satellite_cert_key.pem" is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-05-22 12:57:22 [ERROR ] [root] Parameter certs-server-ca-cert invalid: ca_cert_bundle.pem is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-05-22 12:57:22 [DEBUG ] [root] Exit with status code: 21 (signal was invalid_values)# capsule-certs-generate --foreman-proxy-fqdn "capsule.example.com" --certs-tar "/root/capsule.example.com-certs.tar" --server-cert "capsule_cert.pem" --server-key "capsule_cert_key.pem" --server-ca-cert "ca_cert_bundle.pem" --certs-update-server 2023-06-06 01:59:09 [ERROR ] [root] Parameter server-cert invalid: capsule_cert.pem is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-06-06 01:59:09 [ERROR ] [root] Parameter server-key invalid: capsule_cert_key.pem is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-06-06 01:59:09 [ERROR ] [root] Parameter server-ca-cert invalid: ca_cert_bundle.pem is not one of regexes matching /\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/ or regexes matching /\A\/([^\n\/\0]+\/*)*\z/ 2023-06-06 01:59:09 [DEBUG ] [root] Exit with status code: 21 (signal was invalid_values)
Environment
- Red Hat Satellite 6
- Red Hat Capsule 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.